IETF Logo Mail Archive

[Seat] Re: Updated Attacker Model in SEAT Use Cases Draft

Nathanael Ritz <nathanritz@gmail.com> Wed, 19 August 2026 17:45 UTC

Return-Path: <nathanritz@gmail.com>
X-Original-To: seat@mail2.ietf.org
Delivered-To: seat@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id CB7F112C6254F for <seat@mail2.ietf.org>; Wed, 19 Aug 2026 10:45:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787161532; bh=6ZcIlAESjZ/bcJbBzE0VdhdBTIAKDy7oOeEp39AcDzI=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=g+CdLoL6t/C7mPmuBbJW9WtTBu5pU14WXqnrQ8AbmuY5gS+oJQ8UDL8aYNelzb9ys 6J150GAarjKjBCLI+V8uMDl5y156/B1IsuS95E7Yx+VpseergZCxu2HOkU5H/nBmcR Y9Vbi1XxkrkoMbnmKv/FMW+68LGj2aY0BRR/THEw=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.088
X-Spam-Level:
X-Spam-Status: No, score=-2.088 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id onz7-oDOPcCa for <seat@mail2.ietf.org>; Wed, 19 Aug 2026 10:45:32 -0700 (PDT)
Received: from mail-ej1-x62a.google.com (mail-ej1-x62a.google.com [IPv6:2a00:1450:4864:20::62a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 499D512C62543 for <seat@ietf.org>; Wed, 19 Aug 2026 10:45:32 -0700 (PDT)
Received: by mail-ej1-x62a.google.com with SMTP id a640c23a62f3a-c169ae1cb26so25926166b.1 for <seat@ietf.org>; Wed, 19 Aug 2026 10:45:32 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1787161531; cv=none; d=google.com; s=arc-20260327; b=iOfBSOL+CHCcnYIwYBUb+F2+y7JjdNSyMFBvXEk0Kk5/Cpp5pVNKwCAe1Ec10Nf2R0 +aAVtswQ9g4zKVURR66m2szFjwL2Nl1ItSUBUFTYXvsmFM+mGqlBsPJ2ijvkzE70X2qD 4O7b7N2uBA5NorhdZU9zOSLTpnY9oNAZXzXMFNuoxPvRXcK7bSMlRLt5glivxwn93cl3 j3+tetiJXb8V7gTzeHKgIKSKfb+eBvdfSoc1afuDlj+400RFx5A5GhyL2Nj1Y1YfCX2F YIbMaCmVZ36UBlFgamNbfdJk+ZkC+jAUP4WdGNSfL373+fX1RlSDlrasyYYdAgKQOR0E wz/A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=iE4V1w2ZGnsXPm9Hd/XVkTsm4rWBjL8PcUBckwdlztg=; fh=vUhgW1XUdTt2qq9b9haeT14YCsPNBNpSX9lOArOTNss=; b=CqRXXMkWdVBRGhyMAt3ofhNHI+kdQZIyRz12aGl0pZe4B0+w5Jn47bXcVINrvHxw4F +elFe7TQDBawqW2yE4ih9odlUwve1zwZhmzI2+sFMHLl5x+Yn+18nDxJWePdj9WDIp+Y ms9i+twLLNg6t8dAwOKgg/wkSYQpRXozMUOrrOdw2j0Vpu2MAih21Ukll6b+P2HmLJyD 5cNd35p5VBLsstyl0nQwiFl852Ce/InN90KdfXZKmWsxkQSKoqBGnUsWNeGLBGglB696 zzK7zSPdWj+szD3u9eTnjNVgPUdj3RKyCKf2WXvssQLKfz9O7y7kwaKvyY/XQ3H2EMXZ Urxg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787161531; x=1787766331; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=iE4V1w2ZGnsXPm9Hd/XVkTsm4rWBjL8PcUBckwdlztg=; b=ioLWIH/SRYLIeYQILQVOhb4H3Pk9LTztv/X1YotCORy0piQg7WIxYMLqFrp7SqHIj6 KxMLpmg87TjpqZJgt95WH2Wc/pDyYwQoRVaeY1HG/2Ydv79ZGSz1gmJXC1LbCsA8Pa0+ HqfNGPwL1VZ364gpwbmv/kpUEUMZj/DIc8xZCr8QdUcD0OF4O/dw6AVK9oMIAGSZLpGt C6wfE1HEXAdKEmYW0yVc7OlsNVIdNRxL724+G1ONj+6b7KTq18jD+3I3AE25GKHoncDF BVoGB9l59+GMCfPPU+o2RHk7gHJSih6o14oCT2AO6ZwGEPm4H/JC5pdMc9GR6F9ETJIo KsEA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787161531; x=1787766331; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=iE4V1w2ZGnsXPm9Hd/XVkTsm4rWBjL8PcUBckwdlztg=; b=Z6TxiyyiYYdqZjMIrOKkaByBwzLkl0aGgPSGbsrWuMp5MTNzLK9jDJFnUzNR3OJxma DLCHDmklzdnoB8QYLNGr6w37dLHqJj98n4Kn+vOuCQ7od3v1CDNH8vnrLA9suA3KohH1 Vf6U28czNjrvsUhP7xc0Csk1YulzNy4ZiZn1VulUyBE8np/BcM56n40dM+5RtDJs/8Zu US5sCL1lR+MVQukR9XUcYMMQ9VMTtAwg2mDfI49CBxHWPKQzjJJ5KOEGMdrp/yU7g5dx NFOiR7Z76VnPAwJ0ZEzEB3qB9KPusvA6YbvlWhR8Jyp51pj551dUXZJdP3dJhpunCbcS 0GoQ==
X-Forwarded-Encrypted: i=1; AHgh+RpvPcqj7R2xryAhhUcGgP+aeCq53ttbCrejCFrX8XP/nFm4lw0QL5U3iG4IpsFspM3N+uQ+@ietf.org
X-Gm-Message-State: AOJu0Yw17My5aa8OBckfUbqMdKMjgRedXkcNsCqZ5JVYoppPqd1Y/tvx 86eGWob+kB1ASmyFOWcRQXNPtIsvlXKd1wHADsMwkUaXZHMcZPggB2OMcifaJkdLvedh0HG4Wtz 5X9hSBZInGAk17OhnlIIpNX0aZwu8rMnXnDYmSTQ=
X-Gm-Gg: AR+sD111U3RnT+Lo5u5tngPPsn0mwJKbJW9CdeESV94UNFW1byoWXpNJkFnCWLkUqtg cdmKd40//pXA8SE/qSlmzfBwkknLzIOA/9hM5boQupHlxQye0agf+fmiKp7hhi9zViRAHcdFCaF jQ+gXM/W9+OwXpTZxAfolN3WPeu4khMIPv7IcLBv62U0xfnR0d8ybGCV3VqrI4WH80zkrmy9vS7 w8pC2f3N1YSXILSRDs7FyjjboRzlmevQPUjZmVpf1KEEFhovHgBsAIozEfUxJwNm6Sz+QWRuPg2 Zn7n9n1xP8s2FjgSS4juqXPVabWX0ukpCNTUWOoGIRE=
X-Received: by 2002:a17:907:ea8a:b0:c21:3c4e:cb9d with SMTP id a640c23a62f3a-c244d7e3862mr44610466b.14.1787161530978; Wed, 19 Aug 2026 10:45:30 -0700 (PDT)
MIME-Version: 1.0
References: <CAFpG3gc1POcpcc0NCOFig=e1AgbeMpre2i++xdmXtQTpAp8vqA@mail.gmail.com> <CAK08nYaM7+2j7RgYduVRYEWkjGMYxeQNzHHWuPsbmP0hVDCC5A@mail.gmail.com> <CAFpG3gdvVTbUTCYGV7QWMM-YPctEk+oRL+jODshO3wLvAbPP7w@mail.gmail.com> <CAK08nYZkqacNmMMfyXYjGx-Nim__hA8O-VgsaMQ9D=E-rHq0Og@mail.gmail.com> <CAP3D6hLc-=yFdX8hqrimLTAsGRGtonhiW+oymBQ8g6jF8B56Cg@mail.gmail.com> <CAHxYnaO+cJHzL3sT+ngZoUgBZJxXUcosT13muhUvrnESeOqSOQ@mail.gmail.com> <CAK08nYZF2zftx3T1Gj7mGN8-5YcoL3akmfsY3-ODBDbojtdvuQ@mail.gmail.com> <CAF5PNOFKkTteruF5vX8QMtTByUn7twyeC07xBJBcviZ8m_BC8g@mail.gmail.com>
In-Reply-To: <CAF5PNOFKkTteruF5vX8QMtTByUn7twyeC07xBJBcviZ8m_BC8g@mail.gmail.com>
From: Nathanael Ritz <nathanritz@gmail.com>
Date: Wed, 19 Aug 2026 11:45:17 -0600
X-Gm-Features: AcwNN1XetC03Vtl3VmlnjTiMCzgX3n-YpyMQniEkDbnIy0al0-FB1qZ3W2UN8nQ
Message-ID: <CAHxYnaNFiCDi+EAhFqskk=bjWBO8ofBCh9d6BRb+XN6q4v+4zQ@mail.gmail.com>
To: Song Haowen <havan12050544@gmail.com>, Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
Content-Type: multipart/alternative; boundary="00000000000035d97e065969f870"
Message-ID-Hash: XEIGNIU72EXJMGB42JLE4Q2P24DAEGBZ
X-Message-ID-Hash: XEIGNIU72EXJMGB42JLE4Q2P24DAEGBZ
X-MailFrom: nathanritz@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Songbo Bu <bluedognull@gmail.com>, seat@ietf.org, seat-chairs@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Seat] Re: Updated Attacker Model in SEAT Use Cases Draft
List-Id: "Secure Evidence and Attestation Transport (SEAT) WG" <seat.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/seat/qP3XC0MarFFA3SMbBpWWJtxACNA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/seat>
List-Help: <mailto:seat-request@ietf.org?subject=help>
List-Owner: <mailto:seat-owner@ietf.org>
List-Post: <mailto:seat@ietf.org>
List-Subscribe: <mailto:seat-join@ietf.org>
List-Unsubscribe: <mailto:seat-leave@ietf.org>

On Tue, 18 Aug 2026 at 20:04, Song Haowen <havan12050544@gmail.com> wrote:

> [SNIP] There is only one published CVE so far which is in scope of SEAT
> and we have discussed it thoroughly. I am surprised why there is so much
> hesitency to add it to the threat model.
>
[NR]: I believe such "hesitancy" may be hallucinated :)


> [SNIP] I will create some text for it and share with all for review.
>
[NR]: I don't believe that's necessary, as CVE-2026-33697 is already cited
and accounted for in the -00 revision of draft-ietf-seat-use-cases [0], and
Tiru's PR does not propose removing said existing citation, either.
Therefore, I propose the WG please move on from what appears me to be a
rather persistent and rather unnecessary marketing campaign [1] brought
forward by the proponents [2].

[NR]: Usama, I do not consent to having my name present in the draft as
seen in [3]. Please remove it.

Thanks,
Nathanael

Best,
> Haowen Song
>
[0]
https://www.ietf.org/archive/id/draft-ietf-seat-use-cases-00.html#name-cryptographic-binding-to-co


[1]
https://www.ietf.org/archive/id/draft-intra-handshake-fail-08.html#name-media-coverage,
https://www.ietf.org/archive/id/draft-intra-handshake-fail-08.html#section-15-3

[2]
https://www.ietf.org/archive/id/draft-intra-handshake-fail-08.html#name-authors-addresses

[3]
https://www.ietf.org/archive/id/draft-intra-handshake-fail-08.html#appendix-A-4.24.1

v2.46.0 | Report a Bug | By Email | System Status