Re: [secdir] secdir review of draft-ietf-decade-problem-statement-05

[Leif Johansson <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/22/2012 08:44 AM, Songhaibin wrote:
> Thank you Leif,
> 
>> My main problem with the draft is that the Security
>> Considerations Section is weak. I would have liked a more
>> in-depth analysis of the enumerated threats in the context of
>> decade. For instance the privacy aspects of using in-network
>> storage for P2P networks is only covered briefly as part of a
>> discussion on traffic analysis.
> 
> Because many of the security threats are not very special compared
> to other client-server interactions, so we did not give much
> analysis there, but only quote the potential threats here. But we
> will try to think a little more deeper.
> 

I think thats where we disagree. My argument is that since some of
the architecture is invalidated by common solutions to the usual
threat vectors (eg e2e encryption).

	Cheers Leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9rAMYACgkQ8Jx8FtbMZndKTQCfRPosiDyR8qVxzVv5mxOCZybE
7ggAnjrKN/BC5ZL5F5I/5griYLcwnTa/
=dAdC
-----END PGP SIGNATURE-----