Re: [therightkey] Draft charter for a Transparency Working Group

Ben Laurie <benl@google.com> Thu, 12 December 2013 11:10 UTC

Return-Path: <benl@google.com>
X-Original-To: therightkey@ietfa.amsl.com
Delivered-To: therightkey@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C038E1AE220 for <therightkey@ietfa.amsl.com>; Thu, 12 Dec 2013 03:10:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.38
X-Spam-Level:
X-Spam-Status: No, score=-1.38 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a8-0G7a-trK0 for <therightkey@ietfa.amsl.com>; Thu, 12 Dec 2013 03:10:35 -0800 (PST)
Received: from mail-vb0-x22d.google.com (mail-vb0-x22d.google.com [IPv6:2607:f8b0:400c:c02::22d]) by ietfa.amsl.com (Postfix) with ESMTP id 482ED1AE08D for <therightkey@ietf.org>; Thu, 12 Dec 2013 03:10:35 -0800 (PST)
Received: by mail-vb0-f45.google.com with SMTP id i12so160081vbh.18 for <therightkey@ietf.org>; Thu, 12 Dec 2013 03:10:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=U7Kur6Qu/RWi+Lr6JNUvmKeb5zFRYh8RIiMhQuPJ7Q8=; b=oGBA/WNKXu5ok8m/OE9o8GRNpCD6N39LtM9GptmQA86I9yIGLddzJmt3zON9kxE2FU 2tZTUk7bxVFHSmfRdshXRwuQ4V6HIg8TJwYU1Mn+cZPcSUnTxbaLRDgtfUNwniI90z9Y f0fIt6ilN7+0KoovQOiJoEba+cxGXis1VvFCbp5hRz/Gns+3AW+K/YDFSNPn8onhzFgE Uyn/DdxUOR9fR1rk75IxwQrsycy16unBxCCfqm7zPuwCCuXL/YzgiPtP5HjPUoaQoCKl V2yyKZV4qThzWc1jyF0qjtHfRvmha9Q+9p79Nw4dzXq3uULCDQLGAylxhTZJV4QMpo/U F5/A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=U7Kur6Qu/RWi+Lr6JNUvmKeb5zFRYh8RIiMhQuPJ7Q8=; b=AidUJ5AnAZOHtsDo3T5jbUdkicVUbTYz/WFq1uB6refCIlf+EyddoVNPJVGIGApU1+ 3sIlFmreisVG/0SOeJxqvlZLbWgECBBA+65CT+A5mX3FLu+0r5SGo2e/Q6sytvwHuiG8 haYDH0Q8gG6lCHiVO0fRgIVoHh3zT8zLAO1JgLS0NK255heFl2aUH9SChpWh4Uc4Bvba WTcr+6b+5X/MXxerRa7lUBbRwE1IOUE4qtf7Bdch+Ksr4NMXnegautsYzndFCPDmWyoi V9W04xd47BM9E2BAzAtl8I0EuMzZ/Cs6rKalbItvC01R5EOP0z8KX2oDJHqgp5VYwOLK ft8A==
X-Gm-Message-State: ALoCoQnewYX31yzwF+R3vFmzcpBvO0rB2tHqRpe0FPinZhHW/pNsMtY+48PmCxGgL9qdW2M0POtbJ5arkdGQhPW00I89csslxqmTs/w279N9bjcn4//Q4nwkeusTQvXedglFvUEKaTqO0U/QedSVd7PJTJLtnkyRwxtKZpWKIYDdAxhmDyX6uzM6bkWHTy2Ge6TlsZL1+Zub
MIME-Version: 1.0
X-Received: by 10.52.111.200 with SMTP id ik8mr2721360vdb.2.1386846629215; Thu, 12 Dec 2013 03:10:29 -0800 (PST)
Received: by 10.52.183.65 with HTTP; Thu, 12 Dec 2013 03:10:29 -0800 (PST)
In-Reply-To: <CECE51D6.29F5B%paul@marvell.com>
References: <CABrd9SSzGJy18tf_iR5jFNk-sJyX66OPhmM4H23K5X2ZpWniyQ@mail.gmail.com> <CECE51D6.29F5B%paul@marvell.com>
Date: Thu, 12 Dec 2013 11:10:29 +0000
Message-ID: <CABrd9SRwkxWYV9L1iWsyCqzMYKAcpoeSRh+kG6MMMzZC0y8siw@mail.gmail.com>
From: Ben Laurie <benl@google.com>
To: Paul Lambert <paul@marvell.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Cc: "therightkey@ietf.org" <therightkey@ietf.org>
Subject: Re: [therightkey] Draft charter for a Transparency Working Group
X-BeenThere: therightkey@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <therightkey.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/therightkey>, <mailto:therightkey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/therightkey/>
List-Post: <mailto:therightkey@ietf.org>
List-Help: <mailto:therightkey-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/therightkey>, <mailto:therightkey-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Dec 2013 11:10:36 -0000

On 12 December 2013 01:32, Paul Lambert <paul@marvell.com> wrote:
>
>
> On 12/11/13, 8:55 AM, "Ben Laurie" <benl@google.com> wrote:
>
>>Who's in?
> Very cool concept Š very broad possible applications.
> Less interested in HTTPS/TLS, but many applications.

Great - can you be more specific what interests you?

>
> Paul
>
>
>>
>>"Problem statement: many Internet protocols require a mapping between
>>some kind of identifier and some kind of key, for example, HTTPS,
>>SMTPS, IPSec, DNSSEC and OpenPGP.
>>
>>These protocols rely on either ad-hoc mappings, or on authorities
>>which attest to the mappings.
>>
>>
>>History shows that neither of these mechanisms is entirely
>>satisfactory. Ad-hoc mappings are difficult to discover and maintain,
>>and authorities make mistakes or are subverted.
>>
>>
>>Cryptographically verifiable logs can help to ameliorate the problems
>>by making it possible to discover and rectify errors before they can
>>cause harm.
>>
>>
>>These logs can also assist with other interesting problems, such as
>>how to assure end users that software they are running is, indeed, the
>>software they intend to run.
>>
>>
>>Work items: Specify a standards-track mechanism to apply verifiable
>>logs to HTTP/TLS (i.e. RFC 6962-bis).
>>
>>
>>Discuss mechanisms and techniques that allow cryptographically
>>verifiable logs to be deployed to improve the security of protocols
>>and software distribution. Where such mechanisms appear sufficiently
>>useful, the WG will re-charter to add relevant new work items."
>>_______________________________________________
>>therightkey mailing list
>>therightkey@ietf.org
>>https://www.ietf.org/mailman/listinfo/therightkey
>