Re: [Tcpcrypt] v3 of the charter

[Stephen Farrell <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Overall I think this charter (modulo wordsmithing such as
suggested by Lars) is good enough.

My own nit, but not suggesting a change...

On 30/04/14 09:41, Eggert, Lars wrote:
> Makes sense. Suggest to express it this way, e.g., "the protocol 
> extension must not increase the possibility for endpoint 
> fingerprinting compared to what is possible already".

I generally dislike when a security goal is set to be "no
worse than today" since I think that's how we got e.g. WEP.
But in this case (fingerprinting), I don't think we yet
understand it well enough to do much better. It'd be good
if we did though. So the text Lars suggests is ok.

S.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJTYLwGAAoJEC88hzaAX42iNwgIAL12XxhpMHfTiYM6Q3R7MFRA
MYqFvEPqwwQe4dJNjjVrkNHYImFKAVtTrV2AB3+vGbr1eUJsC8sGOMsL2m7bgI1e
nUzYUVz93gdQLiUcUP5fwtdfNyXdBIEK6RspfCghi0kSBO+wBZhz2wo669Mj0J5O
6YEx+iorX4Fcyz1PutNchOFCiMabWtd1devZb2QpK5lYzuEzixE/vPWqkwJisD0A
TB5b7vAwxvSJtTxGKK//HASpVCORGsXOAOe8HcSm/UrRKvpqzIT+10vCeslwR//f
I6V+Jdswo0t0okJK4SuxVjV56eT3Dc8pRAgoS4ptR1z+djtyD/veHz6O2s8pRm0=
=Mw5p
-----END PGP SIGNATURE-----