Re: [Secdispatch] [Smart] New Version Notification for draft-lazanski-smart-users-internet-00.txt

[Eric Rescorla <[e-mail]>]

On Mon, Jul 15, 2019 at 7:50 AM Bret Jordan <[e-mail]> wrote:

> Kathleen,
>
>
> I do think there is work for the IRTF as well and would like to see that
> encouraged.  The shift to strong encryption is good, but upends the current
> security management models for many.
>
>
> This is one of the points I made during my talk at RSA.  These
> technologies by themselves, are all really great.  The problem comes is
> when you start using all of them together.  To the naive comment earlier
> that this is about vendors trying to sell product, no, this is about
> network and cyber defenders and SoC analysts trying to do their job. There
> are things like regulatory compliance that organizations and enterprises
> are required to follow. Some times I feel like we are so worried about one
> piece of the security pie, that we completely neglect the others.
>

Bret,

As I said before, this is extremely general and hard to act on.

What would be most helpful at this point would be for you to describe a few
ways in which you think the IETF should have designed protocols
differently, so that we can discuss them.

-Ekr


> Here in the IETF everyone needs to better understand how SoC analysts and
> network/cyber defenders do their jobs, what they are asked to do, and what
> tools are available to them.
>
> Bret
>