Re: [saag] Interest COVID-19 'passport' standardization?

Michael Richardson <mcr+ietf@sandelman.ca> Sun, 01 August 2021 12:58 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34A493A3A3C for <saag@ietfa.amsl.com>; Sun, 1 Aug 2021 05:58:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B1oZgU8gyNxH for <saag@ietfa.amsl.com>; Sun, 1 Aug 2021 05:58:04 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFFC13A3A3D for <saag@ietf.org>; Sun, 1 Aug 2021 05:58:04 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 4B2E3389A7; Sun, 1 Aug 2021 09:02:06 -0400 (EDT)
Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 2Uc64Kt_BEzb; Sun, 1 Aug 2021 09:02:02 -0400 (EDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id CC373389A2; Sun, 1 Aug 2021 09:02:02 -0400 (EDT)
Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id A5C109CB; Sun, 1 Aug 2021 08:57:58 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Eliot Lear <lear@lear.ch>, Carsten Bormann <cabo@tzi.org>, Stephen Farrell <stephen.farrell@cs.tcd.ie>, saag@ietf.org
In-Reply-To: <70b5723d-5ac8-5d50-125f-ba4f628f8e59@lear.ch>
References: <CAE1ny+4QdmSJS-spV6Do5yDs1x3iAwyHdSx=Oa+cRXU+ESZ2nA@mail.gmail.com> <09d0a050-781b-a4cc-47bf-d1e652e4c982@cs.tcd.ie> <266B969A-CBC1-473B-8F5F-D7A31B66DA2C@tzi.org> <33cbcf8d-ed18-860f-912b-93a5ad5ea177@cs.tcd.ie> <565DD50B-88AC-4F43-BF76-8A85CC5C1BA7@tzi.org> <70b5723d-5ac8-5d50-125f-ba4f628f8e59@lear.ch>
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature"
Date: Sun, 01 Aug 2021 08:57:58 -0400
Message-ID: <23066.1627822678@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/7L7BHJz56f-XE4QVhE-0gIflsY0>
Subject: Re: [saag] Interest COVID-19 'passport' standardization?
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Aug 2021 12:58:10 -0000

Eliot Lear <lear@lear.ch> wrote:
    > On 31.07.21 18:28, Carsten Bormann wrote:
    >>> WRT feature creep: we shouldn't help.
    >> Maybe unless the features actually are about areas where the tech also
    >> needs features, e.g., for privacy.

There are many countries which have no tech as yet (like mine), and who will
adopt whatever is "cheap", so if we have analysis/critique which might be
shared, then we should do that.

    > I agree, and furthermore, Stephen, what you are describing as feature creep
    > is really new uses and no new features.  This having been said, I do wonder
    > if places like Kantara would be better for such work, as they may harbor more
    > expertise.

What is Kantara?  I guess you mean: https://kantarainitiative.org/ ?

    > I also wonder if a second look at online approaches should be considered. 
    > Don't laugh too loudly, but this might be an interesting application of ohttp
    > ;-)

In my best George Takai accent: "oh my."
You might be right.

--
Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide