Re: [therightkey] The Trouble with Certificate Transparency

Paul Wouters <paul@cypherpunks.ca> Sat, 27 September 2014 02:15 UTC

Return-Path: <paul@cypherpunks.ca>
X-Original-To: therightkey@ietfa.amsl.com
Delivered-To: therightkey@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EBAB1A8790 for <therightkey@ietfa.amsl.com>; Fri, 26 Sep 2014 19:15:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.5
X-Spam-Level:
X-Spam-Status: No, score=-0.5 tagged_above=-999 required=5 tests=[BAYES_05=-0.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Db8LuuIkqE0b for <therightkey@ietfa.amsl.com>; Fri, 26 Sep 2014 19:15:07 -0700 (PDT)
Received: from bofh.nohats.ca (bofh.nohats.ca [76.10.157.69]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A52A81A8785 for <therightkey@ietf.org>; Fri, 26 Sep 2014 19:15:07 -0700 (PDT)
Received: from bofh.nohats.ca (bofh.nohats.ca [127.0.0.1]) by bofh.nohats.ca (Postfix) with ESMTP id E684C80098; Fri, 26 Sep 2014 22:15:04 -0400 (EDT)
Received: from localhost (paul@localhost) by bofh.nohats.ca (8.14.7/8.14.7/Submit) with ESMTP id s8R2F35b001959; Fri, 26 Sep 2014 22:15:04 -0400
X-Authentication-Warning: bofh.nohats.ca: paul owned process doing -bs
Date: Fri, 26 Sep 2014 22:15:03 -0400
From: Paul Wouters <paul@cypherpunks.ca>
X-X-Sender: paul@bofh.nohats.ca
To: Tao Effect <contact@taoeffect.com>
In-Reply-To: <2EF07525-0508-4E4E-950F-05709FAA5466@taoeffect.com>
Message-ID: <alpine.LFD.2.10.1409262213170.27616@bofh.nohats.ca>
References: <4906532C-F002-49E4-9F9F-D8D7D1AD96DB@taoeffect.com> <CADqLbz++OtVCLm3X6PQTq8FFq89CfMFFg2dq8WgK6oWSfJZQbg@mail.gmail.com> <2EF07525-0508-4E4E-950F-05709FAA5466@taoeffect.com>
User-Agent: Alpine 2.10 (LFD 1266 2009-07-14)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"; format="flowed"
Archived-At: http://mailarchive.ietf.org/arch/msg/therightkey/DcbjxqGcslswLZd-wyFFLpgxD4E
X-Mailman-Approved-At: Mon, 29 Sep 2014 13:19:20 -0700
Cc: therightkey@ietf.org, Dmitry Belyavsky <beldmit@gmail.com>
Subject: Re: [therightkey] The Trouble with Certificate Transparency
X-BeenThere: therightkey@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <therightkey.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/therightkey>, <mailto:therightkey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/therightkey/>
List-Post: <mailto:therightkey@ietf.org>
List-Help: <mailto:therightkey-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/therightkey>, <mailto:therightkey-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 27 Sep 2014 02:15:09 -0000

On Fri, 26 Sep 2014, Tao Effect wrote:

> I pointed out back then that gossip was essential if this attack is to have any hope of being
> detected, and I am still waiting for those details.

The trans working group decided to split the gossip protocol from the
main draft and work on it seperately. Seeing that you have some ideas
on how it should be implemented, perhaps you're willing to participate
in its protocol design?

Paul (trans wg co-chair)