[saag] Related work "Do we need an expanded Internet Threat Model?"

Bernie Hoeneisen <bernie@ietf.hoeneisen.ch> Thu, 25 July 2019 18:34 UTC

Return-Path: <bernie@ietf.hoeneisen.ch>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89EC3120198 for <saag@ietfa.amsl.com>; Thu, 25 Jul 2019 11:34:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i3VafGLBPFvR for <saag@ietfa.amsl.com>; Thu, 25 Jul 2019 11:34:31 -0700 (PDT)
Received: from softronics.hoeneisen.ch (softronics.hoeneisen.ch [62.2.86.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7062E120191 for <saag@ietf.org>; Thu, 25 Jul 2019 11:34:30 -0700 (PDT)
Received: from localhost ([127.0.0.1]) by softronics.hoeneisen.ch with esmtp (Exim 4.86_2) (envelope-from <bernie@ietf.hoeneisen.ch>) id 1hqiZQ-00041E-8D for saag@ietf.org; Thu, 25 Jul 2019 20:34:28 +0200
Date: Thu, 25 Jul 2019 20:34:28 +0200
From: Bernie Hoeneisen <bernie@ietf.hoeneisen.ch>
X-X-Sender: bhoeneis@softronics.hoeneisen.ch
To: saag@ietf.org
Message-ID: <alpine.DEB.2.20.1907252027320.15318@softronics.hoeneisen.ch>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"; charset="US-ASCII"
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Mail-From: bernie@ietf.hoeneisen.ch
X-SA-Exim-Scanned: No (on softronics.hoeneisen.ch); SAEximRunCond expanded to false
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/B3Cu5W54chM0PYq9Fq7JYdD2eHI>
Subject: [saag] Related work "Do we need an expanded Internet Threat Model?"
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Jul 2019 18:34:33 -0000

Hi,

Listening to the ongoing discussion in the SAAG WG, I think is it worth 
pointing out to other work in the area that may be relavant to this:

  https://tools.ietf.org/html/draft-symeonidis-medup-requirements-00

This draft outlines threats to security and privacy of internet messaging. 
It is part of the MEDUP (Missing Elements for Decentralized and Usable 
Privacy) approach and discussed on the MEDUP mailling list:

  https://www.ietf.org/mailman/listinfo/MEDUP

cheers,
  Bernie


--

http://ucom.ch/
Modern Telephony Solutions and Tech Consulting for Internet Technology