Re: [therightkey] DNSNMC deprecates Certificate Authorities and fixes HTTPS security

Ali-Reza Anghaie <ali@packetknife.com> Sat, 14 December 2013 19:25 UTC

Return-Path: <ali@packetknife.com>
X-Original-To: therightkey@ietfa.amsl.com
Delivered-To: therightkey@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 783CB1AE28F for <therightkey@ietfa.amsl.com>; Sat, 14 Dec 2013 11:25:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.168
X-Spam-Level:
X-Spam-Status: No, score=-1.168 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, FM_FORGED_GMAIL=0.622, LOTS_OF_MONEY=0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ah-7_h-KuFqb for <therightkey@ietfa.amsl.com>; Sat, 14 Dec 2013 11:25:14 -0800 (PST)
Received: from mail-pd0-x229.google.com (mail-pd0-x229.google.com [IPv6:2607:f8b0:400e:c02::229]) by ietfa.amsl.com (Postfix) with ESMTP id F07DB1ADFF7 for <therightkey@ietf.org>; Sat, 14 Dec 2013 11:25:13 -0800 (PST)
Received: by mail-pd0-f169.google.com with SMTP id v10so3774301pde.28 for <therightkey@ietf.org>; Sat, 14 Dec 2013 11:25:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=packetknife.com; s=google; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=unuPujs1x3QnSZZmUW82C97zO1JGBPtWpMNAJosWv6E=; b=Pd9H3XwwY6GN5RIxd6MKksGrXuXST8SOys/YXO764D4P7hH1rxNVqUjMuDK9NFRGsw kEqM7UBhfrsdWJJgtcNps9+ZuUSSFljTMc34Im9iuRIpHrdl5VvgrV696lMpIIV3JiBb QQo65NoGIAIwJADAxwi8lsY/Onyr+GGWpdbfc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=unuPujs1x3QnSZZmUW82C97zO1JGBPtWpMNAJosWv6E=; b=S7OmR7qf3ZOze4LqDrCtDbfGz1Dg7N8lhNU6pRDiTqxO+ARRn3vrfV/TLSzHQJU2dn u/4SeBa99TjFzekUe8Ld5mtBhKk48OidwSTtLDiOZ9okAne7WeZT8PiCgsM0aqh0swVH Ev6SNuKcweRrPvSSqrjQWzp89YIjYSpFgCixcTKVGXLC4K+CRLQYdo1ELABqUSijlAod xH6Yrk5pzBUdhSdobIapz5O9cGwX3LD5w1m7WnW3LC1fobDAXQvm9RVuBzshinV4BnT9 T0nOdEazvgMArN5ByMssZDNRSAlclvWMCAXH98J/A7Fv0le5EFoCDWag3R9VHs16/9YX M6Vw==
X-Gm-Message-State: ALoCoQkXijLtlSF/SoUb0i2AsyA8DUO23BJCITOBzAY2Uxq/Z1PfgnXdcuwuthIXwQpHv4UNgjiO
MIME-Version: 1.0
X-Received: by 10.67.22.67 with SMTP id hq3mr10822365pad.132.1387049106218; Sat, 14 Dec 2013 11:25:06 -0800 (PST)
Received: by 10.66.157.1 with HTTP; Sat, 14 Dec 2013 11:25:06 -0800 (PST)
In-Reply-To: <CAMm+LwiMXdEnHqD0y_S-fP6081Tk=A=7-9LsJQhRuawmmmfdTg@mail.gmail.com>
References: <22429D73-4EFC-4091-8F5B-BAD38968EA54@taoeffect.com> <CAMm+LwiMXdEnHqD0y_S-fP6081Tk=A=7-9LsJQhRuawmmmfdTg@mail.gmail.com>
Date: Sat, 14 Dec 2013 14:25:06 -0500
Message-ID: <CAPKVt5+ONgfAaX+0i9rGkndJmYmDo74CXGp4osOAwjrBG6_jbQ@mail.gmail.com>
From: Ali-Reza Anghaie <ali@packetknife.com>
To: "therightkey@ietf.org" <therightkey@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"
Subject: Re: [therightkey] DNSNMC deprecates Certificate Authorities and fixes HTTPS security
X-BeenThere: therightkey@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <therightkey.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/therightkey>, <mailto:therightkey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/therightkey/>
List-Post: <mailto:therightkey@ietf.org>
List-Help: <mailto:therightkey-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/therightkey>, <mailto:therightkey-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Dec 2013 19:25:25 -0000

On Sat, Dec 14, 2013 at 12:51 PM, Phillip Hallam-Baker <hallam@gmail.com> wrote:
> Given the success of the US government in shutting down eGold type schemes I
> am very skeptical about the stability of 'namecoin'. If we accept the
> purported scenarios that motivate the scheme then namecoin won't last very
> long.

Aside from the tactful / lack thereof issues in the delivery - this is
a key point not addressed in the proposal. Adoption requires not only
a State unwilling to quash it but ISPs and other providers willing to
support it. This isn't just a US issue, it's quite prevalent an issue
in every moderately to well connected State.

I see nothing in this proposal as of now that I could see any major
provider getting behind in a major way.

> The fact that BitCoin has survived this long is rather surprising. We have
> already seen a huge robbery of over $200 million in bitcoin (from a drug
> dealer). And now we have people trying to de-anonymize the system to stop
> the coins being spent (!)

I'm not sure I agree here - I think it has a lot of believers but also
as importantly it has a lot of power brokers perfectly happy to let it
thrive in the niche area where it can be corralled into easily
identified groups. This tactic will fail the State with other Bitcoin
derivatives but the initial runup (which we're still in) somewhat
reflects a normal permissive environment with the hopes of
criminalization benefits to the State.

-Ali