IETF Logo Mail Archive

[Ssh] Re: Complaint about draft-ietf-sshm-cert

Peter Gutmann <pgut001@cs.auckland.ac.nz> Thu, 30 July 2026 02:27 UTC

Return-Path: <pgut001@cs.auckland.ac.nz>
X-Original-To: ssh@mail2.ietf.org
Delivered-To: ssh@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 44115120D6916 for <ssh@mail2.ietf.org>; Wed, 29 Jul 2026 19:27:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1785378439; bh=gIdblNMDtsE92y/xTHBLyekVA867bUJN+rBSrqtHB7I=; h=From:To:Subject:Date:References:In-Reply-To; b=AcbZvWdpZ01bSQZexlShTT8gw0tZj8Ij9OsdC2hzGC/c+cayRcWZYd+Wx5+hzccPn OvLEi2Vw1UdoUWmzAZIDAk8b9sVqcsIuc/9KUjvKGMqXgjPHZDF8GR+jlodR5wAuH+ IA5N/12uhqi73YYWBkUV4wnENMFRod9L+HXT+QDI=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cs.auckland.ac.nz
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vvSvAxtZKHLR for <ssh@mail2.ietf.org>; Wed, 29 Jul 2026 19:27:17 -0700 (PDT)
Received: from SY8PR01CU002.outbound.protection.outlook.com (mail-australiaeastazon11020116.outbound.protection.outlook.com [52.101.150.116]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 4872A120D6911 for <ssh@ietf.org>; Wed, 29 Jul 2026 19:27:17 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=o/NNg1++c7O7Sl4xmzVkkYeGdReA6WXbBU+bLtF6aty6Xba6oLK8scMQB9gBajmiPzkI3YCmxcZnAj8McPDD47s851qFE92mGoTcwzxN5AZ5e0g0zDUp+mW0jUNuqkrMzVLB3xg1YXKNN4G2fo83DOOQuCbtZozIcP5p2M29pRUk96PJ2ugLhl2biLtuNocP2eMQoSRq1h+R3Dio2/6HNvrXLVOtkwEyB5YJfoyKPpVNKjHwF/84o2hMzcbIddY9px5RFPzJOomf7RRoCNhH2Qk2y+pVD/N8a/N9QQWMuF6mTp0uMkRZtschviA9wGmbnqdy5w8m+rExFWJGUmJM0g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BHfly4mUT97x24oC+tnLaozFB2lu8i+MW2guESKFkQ0=; b=GFVtCth5CQv10ciU0jLySGRHPE+aerklNyI1YW8QML23Bi2c1QxOsNzaSxvRDLzJfQ6DlTBEagFjzsvD+sUYzmy5AJP76nKMwvDsO5ywOB8tX8graGEqPu3PQ2y5NqYURq+Pj/svAIBIM6Av+Dtj5Xe8glbgJgLcQk3euSuzflzGPzt1ksRXkWEWEDnNMJSeCiWMyDd9NLqPbLkQ/BlwOalnpPFnobI4N/yWxRJnGvaR+hB8AhLQ7bd6MStjUYtHGrYnpNUq/D6O119zfzLcxa5OMp6cvXx6+sRxIa/JHXH0AqvdeYEFqfLsoxFfwfv7X5h30in1eQGidORiGXy/ZQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.auckland.ac.nz; dmarc=pass action=none header.from=cs.auckland.ac.nz; dkim=pass header.d=cs.auckland.ac.nz; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.auckland.ac.nz; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BHfly4mUT97x24oC+tnLaozFB2lu8i+MW2guESKFkQ0=; b=ZKHO27DlKHEqewFnLRu0hjhEvOmB9rd8MOQ9heaFxV3xTDFhVEH8coq8xoxVTvcIVH5u95azZeneu38F68ap41iS4IMsxVUITU2yZ+AY3bqG/5Y/xyKwg3LiRl4wANvGvoLJJO995quD4gJcWj078l6BR3VoSTAfk2J46QAUKaHWV48F7vXRYnsyonbbJ8FsJR82VWDSIDnH7d+KdPVD/Sc6mLy/ontKnVtw6TigsDD3fvaYSEcoBgeBI60goDd7C60IMBX19s5XbO2t2b+wDSxv5PoHd0oKaz8AZO8bdPkjjswUWuRMhcKos51X6UixfGWki4AE9DnVKmz/Pb9FEA==
Received: from SYBPR01MB6336.ausprd01.prod.outlook.com (2603:10c6:10:104::10) by ME0PR01MB9608.ausprd01.prod.outlook.com (2603:10c6:220:243::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.270.14; Thu, 30 Jul 2026 02:27:02 +0000
Received: from SYBPR01MB6336.ausprd01.prod.outlook.com ([fe80::db13:393:ea21:b3cb]) by SYBPR01MB6336.ausprd01.prod.outlook.com ([fe80::db13:393:ea21:b3cb%5]) with mapi id 15.21.0270.012; Thu, 30 Jul 2026 02:27:01 +0000
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: 'ssh' <ssh@ietf.org>, "dick@businesscyberguardian.com" <dick@businesscyberguardian.com>
Thread-Topic: [Ssh] Re: Complaint about draft-ietf-sshm-cert
Thread-Index: AQHdH5ZrMy05Q2xB1kisSTkUVL+/67aE8iiAgAACIeeAABlKgIAASI83
Date: Thu, 30 Jul 2026 02:27:01 +0000
Message-ID: <SYBPR01MB6336626D0C4A1E15118BA079EEC92@SYBPR01MB6336.ausprd01.prod.outlook.com>
References: <PH3PPFA3FE8A23F120A56AD898533042AB4C1CA2@PH3PPFA3FE8A23F.namprd11.prod.outlook.com> <703701dd1f98$ac28fbc0$047af340$@businesscyberguardian.com> <MN2PR17MB4031F5FBC99134E059A911EDCDCA2@MN2PR17MB4031.namprd17.prod.outlook.com> <709f01dd1fa6$61b384d0$251a8e70$@businesscyberguardian.com>
In-Reply-To: <709f01dd1fa6$61b384d0$251a8e70$@businesscyberguardian.com>
Accept-Language: en-NZ, en-US
Content-Language: en-NZ
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_b75eb9d1-7479-4f8a-9240-cc5b19dbbc64_Enabled=True;MSIP_Label_b75eb9d1-7479-4f8a-9240-cc5b19dbbc64_SiteId=d1b36e95-0d50-42e9-958f-b63fa906beaa;MSIP_Label_b75eb9d1-7479-4f8a-9240-cc5b19dbbc64_SetDate=2026-07-30T02:27:03.038Z;MSIP_Label_b75eb9d1-7479-4f8a-9240-cc5b19dbbc64_Name=Internal;MSIP_Label_b75eb9d1-7479-4f8a-9240-cc5b19dbbc64_ContentBits=1;MSIP_Label_b75eb9d1-7479-4f8a-9240-cc5b19dbbc64_Method=Standard;
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.auckland.ac.nz;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SYBPR01MB6336:EE_|ME0PR01MB9608:EE_
x-ms-office365-filtering-correlation-id: 3dd2c0c3-489d-4162-aab2-08deede20a01
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|786006|376014|10070799003|366016|23010399003|1800799024|38070700021|56012099006|4143699003|11063799006|10067099003|18002099003|22082099003;
x-microsoft-antispam-message-info: kLwMBEDTmnbdbnrah4xfPjtzmiGi9QnBkJFiNC6SM7Jp4El7qg2o0ve7P93wMzBlUHq8aO1LVrX1VTz7TmlrLyH2piufhV1a60XOZrZRbSVA1VMjRcr2BhGRzHe3sysBEVgTzMZyK1MfVNIx24/plhZJXzpDdgGnL+fULKoJyc2ReZhcFP0g5wI4kkdVgGS97HlqxgBCQGKzjlyDiolbJodbe4GS/OMPigY+GgLwOqRu5rmtGYpZZlGb03NU5jttKJ60mH3QFP3aYfMDxqonPbW3tAjuYSkNsp/Z9zMzgZAJM4/4sXBaP+/5oDl/1U6rLzH1+GCki1W2jsKMLYuxPkJ5fwvzXvIt8t/iHZXbJkgtmZPvRMIcsFL9eA9P8yLsdaSWO5zI9G4wrwNDNlzwNJ11Gf6QVwS21/iN5MPpIWw3zg6QxeS5f3aI6nEvX1o+0HYlsp3fVYZ3WqihbLfSKb6zoGg/yH9bNjiRWvTBkHj5sBMDmpziRTgPp9J0w79MiwLI8J0ksM34SKHi0xkM953UjYhBclfMzyvx4WgdpsVG/UJinQXcTVeB4BNyZLFUck8NhEG6XZ+etTgn+6lHFQZqEE0wzN3tajs2hB9VYlmTCpkfp4MVIAzvr6+4BP07PKS4tIAw9zBX4wiu31pR0qVGYbMbPdWfd05/ReMtfP65GzRHaaEXG4Vii3B1VMcmC8ckon7OeZg+ux34WU68EBTW6RMnHJz2kNjNGYcvQ3g=
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SYBPR01MB6336.ausprd01.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(786006)(376014)(10070799003)(366016)(23010399003)(1800799024)(38070700021)(56012099006)(4143699003)(11063799006)(10067099003)(18002099003)(22082099003);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: dm8Laq7jKO85mg==
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: cs.auckland.ac.nz
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SYBPR01MB6336.ausprd01.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3dd2c0c3-489d-4162-aab2-08deede20a01
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2026 02:27:01.9416 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: d1b36e95-0d50-42e9-958f-b63fa906beaa
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CW1XcmoIGMCWs3GtYSgZ5hcpVDobE1ps9IgJDieIDla03y5c6Q9zj3n7BLRAq64ohrq8dIT87izFHINLji6qERp6n04h+cjQFN4crY8ImWo=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: ME0PR01MB9608
Message-ID-Hash: O7BLNUY3LMV7RDRPNLCBFOQFUH4LLC73
X-Message-ID-Hash: O7BLNUY3LMV7RDRPNLCBFOQFUH4LLC73
X-MailFrom: pgut001@cs.auckland.ac.nz
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ssh.ietf.org-0; header-match-ssh.ietf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ssh] Re: Complaint about draft-ietf-sshm-cert
List-Id: "The SSH mail list will allow discussions on improving aspects of the Secure Shell (SSH) protocol." <ssh.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ssh/LjyFtrWlOCbg4iYXJ-kA08rR_Fs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ssh>
List-Help: <mailto:ssh-request@ietf.org?subject=help>
List-Owner: <mailto:ssh-owner@ietf.org>
List-Post: <mailto:ssh@ietf.org>
List-Subscribe: <mailto:ssh-join@ietf.org>
List-Unsubscribe: <mailto:ssh-leave@ietf.org>

Dick Brooks <dick@businesscyberguardian.com> writes:

>Third, If you choose to ignore innovations with “Trust Verification on the
>Internet”, like what Google has announced

A general observation on this, firstly Google exist in their own private
universe and do whatever they feel like there.  Since most others live outside
this universe, it's not a good argument for going with something they're
doing.

Secondly, the fact that Google have announced something today doesn't mean it
won't be featured on KilledByGoogle a month later, and then where will you be?

So "we should do it because Google is doing it" isn't a very convincing
argument.  In fact given the size of the KilledByGoogle graveyard it might
even serve as an argument against.

Peter.

v2.46.0 | Report a Bug | By Email | System Status