[Seat] draft-fossati-seat-early-attestation and the charter

[Eric Rescorla <[e-mail]>]

Hi folks,

I took a quick look at this draft. I don't have an opinion
about the security of the mechanisms defined in this draft,
but it plainly violates the following clause in the charter:

   The attested (D)TLS protocol extension will not modify the (D)TLS
   protocol itself. It may define (D)TLS extensions to support its
   goals but will not modify, add, or remove any existing protocol
   messages or modify the key schedule.

This draft adds a new message (Attestation) and extends the
key schedule.

More broadly, the point of this text in the charter was to draw a
clear boundary between this WG and TLS proper, which means that you
need to restrict yourself to the normal TLS boundaries, in this case
extensions and exporters.

-Ekr