[stir] Comments on draft-wendt-stir-vesper-00
Jonathan Rosenberg <jdrosen@jdrosen.net> Sun, 21 July 2024 17:13 UTC
Return-Path: <jdrosen2@gmail.com>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66948C14F603 for <stir@ietfa.amsl.com>; Sun, 21 Jul 2024 10:13:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.404
X-Spam-Level:
X-Spam-Status: No, score=-1.404 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rdOO6tG6ZaNE for <stir@ietfa.amsl.com>; Sun, 21 Jul 2024 10:13:04 -0700 (PDT)
Received: from mail-lj1-f176.google.com (mail-lj1-f176.google.com [209.85.208.176]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BA92C14F619 for <stir@ietf.org>; Sun, 21 Jul 2024 10:13:04 -0700 (PDT)
Received: by mail-lj1-f176.google.com with SMTP id 38308e7fff4ca-2ef2cce8c08so5240411fa.0 for <stir@ietf.org>; Sun, 21 Jul 2024 10:13:04 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1721581982; x=1722186782; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=LgEvs/vHr4KWax9JddMeYXIe4ZYXTdRPAAac2ZxvGiM=; b=kP/7kf3ai+3RpQLLK5EowxIf3mx7hNxykyw7b8Xn8mKH2TLhy7To5IOLd8dSZnCZyM RnqCv0NFWo3OKnEJKuRe2xBkWI3nEk0/R9FSFXMh5fU2IhXbXddNi8Dr5Pxnn8KfS4OT 0CsJK+qTRKq2beYcQRPs/RONZL0bwrdRKelCy15wyaH32J2rbZ6q2vAuUn/LS+d+j7cP SHS7Px948ggTvqmVf3nReWFNnnqXNAMbOjy8Ivl2teMlywPUzfK3yKPUJoEP9izqyIgl 4PfU0nGSaby4Umt/VzvaHS59zOkDO84BCVXcaNcrqRx7Es70sUIKZ2IHAzAZQB4feGvF 1xMg==
X-Gm-Message-State: AOJu0YwAp8RMUYUKjiGxz3TfJQC7ldrszbM9pB04NhNTxQWOjejevo8+ imMA/qXx1fhF8J6OGqwpiMMiXFKb/jl6YXr0u955s3KnMHRuDVU0sP5pj08MVIY=
X-Google-Smtp-Source: AGHT+IHaCBtDgoqzHKEJ3WNemLL7Hy1ouCD0QFXoRfQBDvYLzgp0bDUD8IP2ET5vO6HMAGoLMI09oQ==
X-Received: by 2002:a2e:80c6:0:b0:2ef:1db2:c02c with SMTP id 38308e7fff4ca-2ef1db2c1bbmr28613711fa.10.1721581982159; Sun, 21 Jul 2024 10:13:02 -0700 (PDT)
Received: from mail-lj1-f179.google.com (mail-lj1-f179.google.com. [209.85.208.179]) by smtp.gmail.com with ESMTPSA id 38308e7fff4ca-2ef0fc52866sm9302011fa.32.2024.07.21.10.13.02 for <stir@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 21 Jul 2024 10:13:02 -0700 (PDT)
Received: by mail-lj1-f179.google.com with SMTP id 38308e7fff4ca-2ef283c58f4so8962811fa.1 for <stir@ietf.org>; Sun, 21 Jul 2024 10:13:02 -0700 (PDT)
X-Received: by 2002:a05:6512:3daa:b0:52f:288:5664 with SMTP id 2adb3069b0e04-52f028857bbmr1030610e87.51.1721581981605; Sun, 21 Jul 2024 10:13:01 -0700 (PDT)
MIME-Version: 1.0
From: Jonathan Rosenberg <jdrosen@jdrosen.net>
Date: Sun, 21 Jul 2024 13:12:49 -0400
X-Gmail-Original-Message-ID: <CA+23+fH3dnz1dBt=2x7DGJk3ex8yd3jmc7w4Mtp+49e3W=HVzQ@mail.gmail.com>
Message-ID: <CA+23+fH3dnz1dBt=2x7DGJk3ex8yd3jmc7w4Mtp+49e3W=HVzQ@mail.gmail.com>
To: stir@ietf.org
Content-Type: multipart/alternative; boundary="0000000000007733de061dc50a2d"
Message-ID-Hash: YF73XW2IKZCCFBAXQAEJJ4VZYGJMTY6Z
X-Message-ID-Hash: YF73XW2IKZCCFBAXQAEJJ4VZYGJMTY6Z
X-MailFrom: jdrosen2@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-stir.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: [stir] Comments on draft-wendt-stir-vesper-00
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/dFsLWWqmyl_VSfEQu_ptNu5L3Iw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Owner: <mailto:stir-owner@ietf.org>
List-Post: <mailto:stir@ietf.org>
List-Subscribe: <mailto:stir-join@ietf.org>
List-Unsubscribe: <mailto:stir-leave@ietf.org>
This is a very interesting draft. The substance of the draft deals with how to issue JWTs with selective disclosure of information, and as such goes right into details of protocols. However, the real story here is a proposal on an entirely new framework for secure identity for phone numbers, introducing new entities which will (somehow) be able to verify claims about people, like names and addresses and other information, and then issue cryptographic assertions about that information. The hard part of this solution is all of that undocumented framework. What kinds of entities would play the vetting authority role? What information they would vet, and what incentives they might have to play that role. That part - is the hard part, and it is left unsaid in the doc. My other comment would be- in some ways this overlaps with RCD. How do you see this as different from that? Looking forward to the discussion tomorrow. Thx, Jonathan R. -- Jonathan Rosenberg, Ph.D. jdrosen@jdrosen.net http://www.jdrosen.net
- [stir] Comments on draft-wendt-stir-vesper-00 Jonathan Rosenberg
- [stir] Re: Comments on draft-wendt-stir-vesper-00 Chris Wendt