Re: [TLS] [OPSEC] Call For Adoption: draft-wang-opsec-tls-proxy-bp

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Mon, 27 July 2020 13:18 UTC

Return-Path: <prvs=44776c69ca=uri@ll.mit.edu>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C06993A1981; Mon, 27 Jul 2020 06:18:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f5YIvW9GqS9U; Mon, 27 Jul 2020 06:18:25 -0700 (PDT)
Received: from llmx3.ll.mit.edu (LLMX3.LL.MIT.EDU [129.55.12.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A2FF3A196C; Mon, 27 Jul 2020 06:18:24 -0700 (PDT)
Received: from LLE2K16-MBX03.mitll.ad.local (LLE2K16-MBX03.mitll.ad.local) by llmx3.ll.mit.edu (unknown) with ESMTPS id 06RDIAVJ035987; Mon, 27 Jul 2020 09:18:18 -0400
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: "Nancy Cam-Winget (ncamwing)" <ncamwing@cisco.com>, Stephen Farrell <stephen.farrell@cs.tcd.ie>, Jen Linkova <furry13@gmail.com>, OPSEC <opsec@ietf.org>, "tls@ietf.org" <tls@ietf.org>
CC: OpSec Chairs <opsec-chairs@ietf.org>
Thread-Topic: [OPSEC] [TLS] Call For Adoption: draft-wang-opsec-tls-proxy-bp
Thread-Index: AQHWZBVpJXnfp71rHkOfsGQ2RTr97KkbaJqA
Date: Mon, 27 Jul 2020 13:18:16 +0000
Message-ID: <845E6D98-DD1C-4FD7-AEF6-A262C10B35A8@ll.mit.edu>
References: <DM6PR05MB634890A51C4AF3CB1A03DA0BAE7A0@DM6PR05MB6348.namprd05.prod.outlook.com> <CAFU7BAS=ymUPTAGB_fOSrHTG0OajV1n5M1-yOBWxvGam-a89AA@mail.gmail.com> <d9d6d8c2-3916-be28-d01f-f040a28ce361@cs.tcd.ie> <9F2FDA20-12AA-4523-905D-7C9380B7A390@ll.mit.edu> <43A56381-0BA8-4123-A2D5-950FD1EDFC86@cisco.com>
In-Reply-To: <43A56381-0BA8-4123-A2D5-950FD1EDFC86@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.38.20061401
x-originating-ip: [172.25.1.84]
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha256; boundary="B_3678686295_1733652896"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-07-27_08:2020-07-27, 2020-07-27 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-2006250000 definitions=main-2007270097
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/PGdoR-fi0Nkes4ceKmwnrk4Ci5Q>
Subject: Re: [TLS] [OPSEC] Call For Adoption: draft-wang-opsec-tls-proxy-bp
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Jul 2020 13:18:28 -0000

Nancy,

Understood. However, in this particular case, instead of "if you want to do this, then do it that way, and I'll help you inter-operate" I prefer "if you want to do this - you're on your own, don't seek a blessing or advice from me".

Regards,
Uri

On 7/27/20, 08:56, "Nancy Cam-Winget (ncamwing)" <ncamwing@cisco.com> wrote:

    The document is not imposing any standards but rather provide guidelines for those implementing TLS proxies;  given that proxies will continue to exist I'm not sure why there is a belief that the IETF should ignore this.

    Warm regards, Nancy

    On 7/27/20, 5:20 AM, "OPSEC on behalf of Blumenthal, Uri - 0553 - MITLL" <opsec-bounces@ietf.org on behalf of uri@ll.mit.edu> wrote:

        I support Stephen and oppose adoption. IMHO, this is not a technology that IETF should standardize.


        On 7/25/20, 10:07, "TLS on behalf of Stephen Farrell" <tls-bounces@ietf.org on behalf of stephen.farrell@cs.tcd.ie> wrote:


            I oppose adoption. While there could be some minor benefit
            in documenting the uses and abuses seen when mitm'ing tls,
            I doubt that the effort to ensure a balanced document is at
            all worthwhile. The current draft is too far from what it'd
            need to be to be adopted.

            Send to ISE.

            S.

            On 23/07/2020 02:30, Jen Linkova wrote:
            > One thing to add here: the chairs would like to hear active and
            > explicit support of the adoption. So please speak up if you believe
            > the draft is useful and the WG shall work on getting it published.
            > 
            > On Mon, Jul 20, 2020 at 3:35 AM Ron Bonica
            > <rbonica=40juniper.net@dmarc.ietf.org> wrote:
            >>
            >> Folks,
            >>
            >>
            >>
            >> This email begins a Call For Adoption on draft-wang-opsec-tls-proxy-bp.
            >>
            >>
            >>
            >> Please send comments to opsec@ietf.org by August 3, 2020.
            >>
            >>
            >>
            >>                                                                 Ron
            >>
            >>
            >>
            >>
            >> Juniper Business Use Only
            >>
            >> _______________________________________________
            >> OPSEC mailing list
            >> OPSEC@ietf.org
            >> https://www.ietf.org/mailman/listinfo/opsec
            > 
            > 
            > 
            > --
            > SY, Jen Linkova aka Furry
            > 
            > _______________________________________________
            > TLS mailing list
            > TLS@ietf.org
            > https://www.ietf.org/mailman/listinfo/tls
            >