IETF Logo Mail Archive

Re: [Privacy-pass] The PRIVACYPASS WG has placed draft-group-privacypass-consistency-mirror in state "Candidate for WG Adoption"

Christopher Wood <caw@heapingbits.net> Mon, 08 January 2024 21:49 UTC

Return-Path: <caw@heapingbits.net>
X-Original-To: privacy-pass@ietfa.amsl.com
Delivered-To: privacy-pass@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B48FCC06F690; Mon, 8 Jan 2024 13:49:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=heapingbits.net header.b="SL1exmuK"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="h9ChAmeS"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Kh_a8Ca1HaM; Mon, 8 Jan 2024 13:48:57 -0800 (PST)
Received: from wout5-smtp.messagingengine.com (wout5-smtp.messagingengine.com [64.147.123.21]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADFA3C06F68E; Mon, 8 Jan 2024 13:48:57 -0800 (PST)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id 289C33200A95; Mon, 8 Jan 2024 16:48:54 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Mon, 08 Jan 2024 16:48:54 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=heapingbits.net; h=cc:cc:content-type:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1704750533; x= 1704836933; bh=z7gOO4ssSVmzoylFwIRxhKcsOdgf/1p1TKNmqjZKQkQ=; b=S L1exmuKkisyl3RmakAtuUj+/wKgn6u12hSA+i8/AnuNQUtwUHokW+3LR6L/PsOoH 8SC74v63L1ah0gRewiQqA34PIztVVNt3Wzr22YI9Napgsa0crQpnSP9kNav9S5Rp MrEdZ/04N5vki14UrW59Jxq/G+JChyYEKKnXSQQ+Y3sIGJwkHwtRPXImFHRDlxp/ fBFQJHIdrGrSmJ2wDzPwykl18NvgfQSdBf9FJvxkBG24upBt4VxnxXtt6FuWNLKK dg3BNhxhBYdF8imuOUKkgMg/R1lJhkJLYSx/ycpItt5h8u7uvr7ALCl+Xisdfwjj FiFIEfx8+mirjpqFUo0/w==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm2; t=1704750533; x=1704836933; bh=z7gOO4ssSVmzoylFwIRxhKcsOdgf /1p1TKNmqjZKQkQ=; b=h9ChAmeS1iEi1hK5oHe/5mfobwqqaaN6L13QSjvBBW+l 0d331HrKjRs7jApnt+nkKLP14H9oanffDdQLln/CVLaBd+/YPiR6ChTS86clQgcw pLx7PZdF1Uta6UZuKtr2As14+jjG2xPeKf5G/yT/riDSE/gw+DelQ9Ck99nESD63 R7NQnkyC0I4pPhKVolxLMUq0r0+XjZpco1wHK7OkZ9njmRCQ4DSIrQFN1NYDqGZC ao30yaGr973pJvhx0VZ6BfSwg94Y3qtL+HNgCLKdDnKcRdw2QuoGZC9ubWZa30oD QsKcR/VoxZ+86itMjGw9u3PfpPDBMkf1eyCijgBlWg==
X-ME-Sender: <xms:xW2cZdm5pNzTpFcsW7-g4XlkZVx2DFN31OPCCa4pJRbqQ67ZYQKSXw> <xme:xW2cZY0zHrtJWvLJEYxX9p-bzHHY-tgWD_B0o207MIA1o5suk0x07-oDG4GexbgO0 -s8qkkdFm-ytjqz_Ug>
X-ME-Received: <xmr:xW2cZTr5iJF1x6z7ZCDvLKwEZlHD-4VkGIoHGwf7-a--W1ZnEu-h3lcP4E0HYiHN0McMPIDmWLUucbgjtROqFZEpsumSIn292gwBGwyQ5TizscpKUUxBpg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdehjedgudehvdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffktgggufffjgevvfhfofesrg dtmherhhdtjeenucfhrhhomhepvehhrhhishhtohhphhgvrhcuhghoohguuceotggrfies hhgvrghpihhnghgsihhtshdrnhgvtheqnecuggftrfgrthhtvghrnhepgedtkeetheduge eiffefleejudeggeeiffeigffghffftdfggfdvheevleeiieejnecuffhomhgrihhnpehi vghtfhdrohhrghenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfh hrohhmpegtrgifsehhvggrphhinhhgsghithhsrdhnvght
X-ME-Proxy: <xmx:xW2cZdmll1lAqHvtcL2-3NK1yQGAv-PUtGLtuVsljukleKl7nUOreg> <xmx:xW2cZb1X4rJeOAZVDcJEh21m-yhDYPR6bkEoGcL04k-03L67RKg7Ww> <xmx:xW2cZcvFVc6CnhnmX7Neud5UtpmM-LxfZHWJahIOVC5o5FZSkv400Q> <xmx:xW2cZWRDaTKBZ9aLzjx7pJtste46QqxxjVmToFLT3PcDkAAvuxEg4Q>
Feedback-ID: i2f494406:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 8 Jan 2024 16:48:53 -0500 (EST)
From: Christopher Wood <caw@heapingbits.net>
Message-Id: <0D02A8D0-3047-4782-9317-62314663FC66@heapingbits.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_AB434AD9-6057-40AD-AC37-7E92382FB8BA"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.300.61.1.2\))
Date: Mon, 08 Jan 2024 16:48:42 -0500
In-Reply-To: <BN8PR15MB32811657C0AEC39E213E8798B382A@BN8PR15MB3281.namprd15.prod.outlook.com>
Cc: IETF Secretariat <ietf-secretariat-reply@ietf.org>, "draft-group-privacypass-consistency-mirror@ietf.org" <draft-group-privacypass-consistency-mirror@ietf.org>, "privacy-pass@ietf.org" <privacy-pass@ietf.org>, "privacypass-chairs@ietf.org" <privacypass-chairs@ietf.org>, Richard Barnes <rlb@ipv.sx>
To: Ben Schwartz <bemasc@meta.com>
References: <170137846545.34849.17139555973021303518@ietfa.amsl.com> <BN8PR15MB32811657C0AEC39E213E8798B382A@BN8PR15MB3281.namprd15.prod.outlook.com>
X-Mailer: Apple Mail (2.3774.300.61.1.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/privacy-pass/Rdxard-gak4KQSNhXAVygUXw6o8>
Subject: Re: [Privacy-pass] The PRIVACYPASS WG has placed draft-group-privacypass-consistency-mirror in state "Candidate for WG Adoption"
X-BeenThere: privacy-pass@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Privacy Pass Protocol <privacy-pass.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/privacy-pass>, <mailto:privacy-pass-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/privacy-pass/>
List-Post: <mailto:privacy-pass@ietf.org>
List-Help: <mailto:privacy-pass-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/privacy-pass>, <mailto:privacy-pass-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Jan 2024 21:49:02 -0000

I’m relaying feedback from Richard Barnes (cc’d), with his permission.

~~~
* It seems like the idea is still to ask two servers, a primary and a mirror.  
  * Or are you saying you would only ask the mirror, because the mirror is trusted to provide the same answer to everyone?
  * That seems no better than trusting the primary, unless you're going to make some role separation argument
* You have introduced an open relay problem.  Say if the mirror is inside a geofence, but I'm not.  Mirrors need to filter.

All of which seems more complicated and fragile than a simple transparency log that people can audit, and from which the primary could provide inclusion proofs.
~~~

> On Nov 30, 2023, at 4:39 PM, Ben Schwartz <bemasc@meta.com> wrote:
> 
> We are opening a two-week Call for Adoption (ending Friday, December 15th) for "Checking Resource Consistency with HTTP Mirrors".
> 
> Please comment in this thread with your view as to whether this document should be adopted by the PRIVACYPASS working group.
> 
> --Ben Schwartz, for the chairs.
> From: Privacy-pass <privacy-pass-bounces@ietf.org <mailto:privacy-pass-bounces@ietf.org>> on behalf of IETF Secretariat <ietf-secretariat-reply@ietf.org <mailto:ietf-secretariat-reply@ietf.org>>
> Sent: Thursday, November 30, 2023 4:07 PM
> To: draft-group-privacypass-consistency-mirror@ietf.org <mailto:draft-group-privacypass-consistency-mirror@ietf.org> <draft-group-privacypass-consistency-mirror@ietf.org <mailto:draft-group-privacypass-consistency-mirror@ietf.org>>; privacy-pass@ietf.org <mailto:privacy-pass@ietf.org> <privacy-pass@ietf.org <mailto:privacy-pass@ietf.org>>; privacypass-chairs@ietf.org <mailto:privacypass-chairs@ietf.org> <privacypass-chairs@ietf.org <mailto:privacypass-chairs@ietf.org>>
> Subject: [Privacy-pass] The PRIVACYPASS WG has placed draft-group-privacypass-consistency-mirror in state "Candidate for WG Adoption"
>  
> !-------------------------------------------------------------------|
>   This Message Is From an External Sender
> 
> |-------------------------------------------------------------------!
> 
> 
> The PRIVACYPASS WG has placed draft-group-privacypass-consistency-mirror in
> state Candidate for WG Adoption (entered by Benjamin Schwartz)
> 
> The document is available at
> https://datatracker.ietf.org/doc/draft-group-privacypass-consistency-mirror/
> 
> 
> -- 
> Privacy-pass mailing list
> Privacy-pass@ietf.org <mailto:Privacy-pass@ietf.org>
> https://www.ietf.org/mailman/listinfo/privacy-pass

v2.26.15 | Report a Bug | By Email | System Status