Re: [TLS] Should TLS 1.3 use an augmented PAKE by default?

[Yaron Sheffer <[e-mail]>]

> Huh. I was about to reply “you, me, Andy, and what army?”
>
> Seriously, we can’t establish a new norm in any forum that does not include web designers and UX people. Somewhere there are people who design the UX for people browsing Facebook, Gmail, my bank, Amazon and some web store selling dog food over the Internet. They get to decide what technology goes into the web site, and unfortunately none of them attend the meetings of any of the groups you mentioned. In fact, they don’t follow any IETF group, so we can’t even invite them all to a BoF.
>
> Given that, I don’t think any value of “we” that belongs to the IETF can establish any norms.  I wish this was different.
>
> Yoav
>

There is a (small) discipline of "security usability". For example, see 
[1]. Some things that we do have a lot to do with usability, and I think 
it's time we engaged with that community. "We" here is the SAAG 
community. This applies to PAKE, browser "padlocks" and phishing. I 
think this also applies that which shall remain unnamed, but some people 
call OE, and some other people hate them for that.

Thanks,
	Yaron

[1] https://cups.cs.cmu.edu/soups/2014/