Re: [Spud] network/middle boxes information

Hi Salvatore,

we are currently focusing on use case where you ‚may trust but verify‘ (see constraints). If you want to establish an explicit trust relationship with the middlebox, I personally thing that is currently out of scope. I believe there is information that both, middle and end, are willing to release without a trust relation and which could already provide useful input to e.g. better support certain app requirements. Often these kind of information is already available today by DPI (or at least assumptions are taken based on DPI, which might or might not be true). Providing control which information should be exposed (while encrypting the rest) actually provides better control of information leakage and privacy than we often have today. Further, as these information are only declarative, you can anyway never rely on them: that means you should for all your action always take into account that the information might be wrong (or alter by another entity). However, having some information as a starting point is very often extremely useful, if the alternative is having no information at all.

That’s just my view on scoping.

Mirja

> Am 25.03.2015 um 12:27 schrieb Salvatore Loreto <salvatore.loreto@ericsson.com>om>:
> 
> 
> During the open discussion Andrew expressed the fact that the networks have a lot of information
> that can be of interest (or even useful) to the end points (we have seen a proof of this already in tsvwg yesterday).
> 
> I want make clear that privacy and security is also important the network not only for the endpoints.
> We have to make sure that the middle box that is requested to share some info with the endpoint
> can do that in a secure/encrypted way (i.e. be able to decide who will be able to see the info in clear)
> 
> br
> Salvatore
> _______________________________________________
> Spud mailing list
> Spud@ietf.org
> https://www.ietf.org/mailman/listinfo/spud