Re: [TLS] Please discuss: draft-housley-evidence-extns-00 - use to

[Martin Rex <[e-mail]>]

Thank your for your explanations.

I don't understand why this proposal is brought to the IETF.

>From what I read, the IETF originally started out with government
funding, an a large part came from the department of defense.
The IPv4 spec says something like there was a secretive variant
of IP(v4) with support for all the esoteric stuff that you
are talking about for use in the military and by secretive agencies.
The academic and public wasn't bothered with any of this.


Today, the IETF is an open international forum and producing
standards for use in COTS (commercial of the shelf) software and
Open Source, for the masses (private and business use).

There is a huge gap between the concepts that you described
and the software that we're using today, at home and in the office
--it's not even in the same galaxy.


I think you should carry this proposal and the concepts back down
into the secret cellar where it comes from, and where those guys
dwell who believe that they need it, and that they continue
playing on their own.  They probably need multi-level security
in order to contain the evidence why something fucked up, who was
responsible and who else knew about it.


In the IETF we should try to produce standards for the needs of
the general public and remain on a level playing field with
e.g. the IETF apps area.  For years they have been complaining
that IETF security protocols are already to difficult and too
complex for them, and there is some truth in it, they are
already pretty secure and pretty complex.


A chain is only as strong as its weakest link, and the TLS Evidence
proposal is such an enormous and heavy link, it is going to rip
this chain apart all alone by its own weight.


-Martin

_______________________________________________
TLS mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/tls