Re: [Secdispatch] IETF118 - Call for topics

Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 17 October 2023 20:07 UTC

Return-Path: <dkg@fifthhorseman.net>
X-Original-To: secdispatch@ietfa.amsl.com
Delivered-To: secdispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA4EEC151998 for <secdispatch@ietfa.amsl.com>; Tue, 17 Oct 2023 13:07:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.313
X-Spam-Level:
X-Spam-Status: No, score=-6.313 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (unsupported algorithm ed25519-sha256)" header.d=fifthhorseman.net header.b="ZCoqOltZ"; dkim=pass (2048-bit key) header.d=fifthhorseman.net header.b="PO5qIfHO"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I3VmCmDjkqov for <secdispatch@ietfa.amsl.com>; Tue, 17 Oct 2023 13:06:59 -0700 (PDT)
Received: from che.mayfirst.org (unknown [162.247.75.117]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21E1CC15154E for <secdispatch@ietf.org>; Tue, 17 Oct 2023 13:06:58 -0700 (PDT)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019; t=1697573217; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=mPA0PuLalAm7Xv0p4Svwk21eOHG2tcwnhVmcoqyuR74=; b=ZCoqOltZx7HOiM5uLk7rhMIXi0Z0o0H6J7CWAodhvjPUX8jhAT21CPk7xRs1Zlc2JsQcS Hm79LaTdj6yXdH8CQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=fifthhorseman.net; i=@fifthhorseman.net; q=dns/txt; s=2019rsa; t=1697573217; h=from : to : subject : in-reply-to : references : date : message-id : mime-version : content-type : from; bh=mPA0PuLalAm7Xv0p4Svwk21eOHG2tcwnhVmcoqyuR74=; b=PO5qIfHO6+qkt7OpxS26AAkb0b/EHKjQjhv4iWP+ukij2fXVqJ31eAnKEAZIgbj4TXybN MwkWhNuB+H0Z7fVEIeo0DH78F6DfiyK4FmId1zIPnOymG0ZymFyfjbXg3QrQkDjgBtHXH2V 9XBn00QPB/CXFOCO63UM74wYA7uPgloE2Y+OthsouS37CTCRVF/xyl6R/UtOeE2tqQV4+J1 r7/qCJjYjNVH0bvKAU5mDZtApMDZ2zqye0hw8wj93+UTRuZ4oSVWqgzHFkfdfozCPCyoTz9 CHt1DKRvKatf227aVBV960oIk388m7JH2J+5BEc1SIOHcssA3Is2MxhMQrkA==
Received: from fifthhorseman.net (AMERICAN-CI.ear2.NewYork6.Level3.net [4.59.214.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by che.mayfirst.org (Postfix) with ESMTPSA id 3963DF9E7; Tue, 17 Oct 2023 16:06:57 -0400 (EDT)
Received: by fifthhorseman.net (Postfix, from userid 1000) id 6B8F52055B; Tue, 17 Oct 2023 16:06:54 -0400 (EDT)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>, secdispatch <secdispatch@ietf.org>, Aron Wussler <aron@wussler.it>
In-Reply-To: <CADNypP-Ve2J2X26dJ_1myKqcX6THJUUAJUc+P4e3diB1YjLJrA@mail.gmail.com>
References: <CADNypP-Ve2J2X26dJ_1myKqcX6THJUUAJUc+P4e3diB1YjLJrA@mail.gmail.com>
Autocrypt: addr=dkg@fifthhorseman.net; prefer-encrypt=mutual; keydata= mDMEX+i03xYJKwYBBAHaRw8BAQdACA4xvL/xI5dHedcnkfViyq84doe8zFRid9jW7CC9XBiI0QQf FgoAgwWCX+i03wWJBZ+mAAMLCQcJEOCS6zpcoQ26RxQAAAAAAB4AIHNhbHRAbm90YXRpb25zLnNl cXVvaWEtcGdwLm9yZ/tr8E9NA10HvcAVlSxnox6z62KXCInWjZaiBIlgX6O5AxUKCAKbAQIeARYh BMKfigwB81402BaqXOCS6zpcoQ26AADZHQD/Zx9nc3N2kj13AUsKMr/7zekBtgfSIGB3hRCU74Su G44A/34Yp6IAkndewLxb1WdRSokycnaCVyrk0nb4imeAYyoPtBc8ZGtnQGZpZnRoaG9yc2VtYW4u bmV0PojRBBMWCgCDBYJf6LTfBYkFn6YAAwsJBwkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3Rh dGlvbnMuc2VxdW9pYS1wZ3Aub3JnL0Gwxvypz2tu1IPG+yu1zPjkiZwpscsitwrVvzN3bbADFQoI ApsBAh4BFiEEwp+KDAHzXjTYFqpc4JLrOlyhDboAAPkXAP0Z29z7jW+YzLzPTQML4EQLMbkHOfU4 +s+ki81Czt0WqgD/SJ8RyrqDCtEP8+E4ZSR01ysKqh+MUAsTaJlzZjehiQ24MwRf6LTfFgkrBgEE AdpHDwEBB0DkKHOW2kmqfAK461+acQ49gc2Z6VoXMChRqobGP0ubb4kBiAQYFgoBOgWCX+i03wWJ BZ+mAAkQ4JLrOlyhDbpHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3Jnfvo+ nHoxDwaLaJD8XZuXiaqBNZtIGXIypF1udBBRoc0CmwICHgG+oAQZFgoAbwWCX+i03wkQPp1xc3He VlxHFAAAAAAAHgAgc2FsdEBub3RhdGlvbnMuc2VxdW9pYS1wZ3Aub3JnaheiqE7Pfi3Atb3GGTw+ jFcBGOaobgzEJrhEuFpXREEWIQQttUkcnfDcj0MoY88+nXFzcd5WXAAAvrsBAIJ5sBg8Udocv25N stN/zWOiYpnjjvOjVMLH4fV3pWE1AP9T6hzHz7hRnAA8d01vqoxOlQ3O6cb/kFYAjqx3oMXSBhYh BMKfigwB81402BaqXOCS6zpcoQ26AADX7gD/b83VObe14xrNP8xcltRrBZF5OE1rQSPkMNy+eWpk eCwA/1hxiS8ZxL5/elNjXiWuHXEvUGnRoVj745Vl48sZPVYMuDgEX+i03xIKKwYBBAGXVQEFAQEH QIGex1WZbH6xhUBve5mblScGYU+Y8QJOomXH+rr5tMsMAwEICYjJBBgWCgB7BYJf6LTfBYkFn6YA CRDgkus6XKENukcUAAAAAAAeACBzYWx0QG5vdGF0aW9ucy5zZXF1b2lhLXBncC5vcmcEAx9vTD3b J0SXkhvcRcCr6uIDJwic3KFKxkH1m4QW0QKbDAIeARYhBMKfigwB81402BaqXOCS6zpcoQ26AAAX mwD8CWmukxwskU82RZLMk5fm1wCgMB5z8dA50KLw3rgsCykBAKg1w/Y7XpBS3SlXEegIg1K1e6dR fRxL7Z37WZXoH8AH
Date: Tue, 17 Oct 2023 16:06:53 -0400
Message-ID: <87edhtj9nm.fsf@fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdispatch/FDPH6kCi-boPhvV50yha8tXHR14>
Subject: Re: [Secdispatch] IETF118 - Call for topics
X-BeenThere: secdispatch@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Security Dispatch <secdispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdispatch/>
List-Post: <mailto:secdispatch@ietf.org>
List-Help: <mailto:secdispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Oct 2023 20:07:03 -0000

On Mon 2023-10-09 16:17:11 -0400, Rifaat Shekh-Yusef wrote:

> Please, reply to this email or directly to the chair if you have topics
> that you would like to discuss in Prague.

Hi Rifaat--

If possible, i'd like to raise draft-dkg-lamps-expect-signed-mail at
secdispatch at IETF 118 in Prague:

  https://datatracker.ietf.org/doc/draft-dkg-lamps-expect-signed-mail/

Readers following other mailing list discussions may recognize this as a
(very rough) analogy to HTTP's HSTS: the goal is to have a clear signal
that a recipient of an e-mail message can use to decide whether to
present a warning to the user if the message is not cryptographically
signed with an end-to-end mechanism.  (in HSTS, the browser gets a
signal to know to refuse access to a web site if it does not use HTTPS).

Aron Wussler and i started sketching this out a while ago.  i think it's
worth seeing who else is interested, and getting feedback to make sure
the draft makes the right choices (there are several significant
questions in Appendix B that warrant helpful discussion:
https://www.ietf.org/archive/id/draft-dkg-lamps-expect-signed-mail-01.html#name-mapping-the-solution-space
)

Russ and Tim will probably hate me, but I expect that a likely dispatch
outcome is to send this document to LAMPS (hence the name i've chosen
for the draft), but of course i'd be fine with dispatch to any other
relevant WG that has capacity and interest.

I can post some slides about it to the datatracker if there's ~10
minutes available in the meeting.

         --dkg