Re: [TLS] TLS@IETF101 Agenda Posted

nalini elkins <nalini.elkins@e-dco.com> Thu, 15 March 2018 00:05 UTC

Return-Path: <nalini.elkins@e-dco.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F1BB129C6B for <tls@ietfa.amsl.com>; Wed, 14 Mar 2018 17:05:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=e-dco-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8P_KdK_1IYlD for <tls@ietfa.amsl.com>; Wed, 14 Mar 2018 17:05:54 -0700 (PDT)
Received: from mail-it0-x232.google.com (mail-it0-x232.google.com [IPv6:2607:f8b0:4001:c0b::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF111129C56 for <tls@ietf.org>; Wed, 14 Mar 2018 17:05:53 -0700 (PDT)
Received: by mail-it0-x232.google.com with SMTP id z7-v6so5118275iti.1 for <tls@ietf.org>; Wed, 14 Mar 2018 17:05:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=e-dco-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=AdxnXeqKcAWmrzk8eLHxgPkybQONteimNR9OtbfDb2c=; b=CzGZ+NMtaoZpLAGfYA0l/y4Ddx3rugormFPBjRyn1GnQj1p5uLkkVvDM3tlISSZTQH 9fHZ81JdLjc7nxPsgVP6Z2OggkmkWAZlmQQ1MvLth7w/Wfw5en3+1pDTx6ov3mUP3uLY DbiNKY8PdhG5uHUr3rseICM0Scz1ztoAElD67PFBYOCayG3bvgCJ64YKHDp1h5WvHe5m 8rXQf3GC4JOIZcTOC1YX6jZn1TjUJ8xAX8VJb3a8iI948ZyUv/t88DGp77xCKFgzf9Yi ghq+UlBFo5AUxktdvHchr3Cf+Coxx3Y/afg8pjMQPVSq6r3Dhciow9YVCVYEVxy2FS7m dVHw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=AdxnXeqKcAWmrzk8eLHxgPkybQONteimNR9OtbfDb2c=; b=mCXtAaOnLA55CLmuNhovwf/FuMST1eam3R28LyDf9hLM08KL5cMeOHoMsQcdtZSqar Wl6T6WqYwkDfSZnUO7xaavB/Z4zFlWFEsfzNlACrqYg9V/tAkAidzi3mgfXJDgXoy5k0 2nRIQzHZgV/A96IN+BPHukoN8scP3g/8ra1ClNjZhjlVJGP0bhIdCAZiOq4r6QI1vLDq hmiDLhLzHkiobw6yMyGJguyzvhHjsHNE5tdJeo+W11iqWoVjN2e39wHtAkOZK0gWc1d8 6DfZ+jVjdIO3MyOM4hhXK5LdWoMUfYL9pbFs0gM3xNtqE+rNmb+EGQt4oW53pay52aYO SV5A==
X-Gm-Message-State: AElRT7HEMkg5/MDcIeI5ANxsJrNQhTcAvdhN3P9HnShfOMD3rc9AYDgb yP4QUCzHFzQc3F/5R8uOcvrndsYfWHWHB3tlOMGGgw==
X-Google-Smtp-Source: AG47ELviVRvyDlRiOSbb6p1NBjpHO0WdPd27s4/duTDngbznnX1L07p3V1eZYqYCir/dViK8je6peHiHII1wBzQUqHE=
X-Received: by 10.36.154.69 with SMTP id l66mr3998796ite.19.1521072353227; Wed, 14 Mar 2018 17:05:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.2.29.138 with HTTP; Wed, 14 Mar 2018 17:05:52 -0700 (PDT)
In-Reply-To: <964d23e3-fe80-f785-f3d6-aa0a3cda4470@cs.tcd.ie>
References: <6140B7A6-A1C7-44BC-9C65-9BE0D5E1B580@sn3rd.com> <986797a7-81b0-7874-5f39-afe83c86635b@cs.tcd.ie> <CAOgPGoBYc7O+qmjM-ptkRkE6mRsOYgc5O7Wu9pm3drFp3TVa6Q@mail.gmail.com> <d7dfdc1a-2c96-fd88-df1b-3167fe0f804b@cs.tcd.ie> <CAHbuEH7E8MhFcMt2GSngSrGxN=6bU6LD49foPC-mdoUZboH_0Q@mail.gmail.com> <1a024320-c674-6f75-ccc4-d27b75e3d017@nomountain.net> <2ed0gc.p5dcxd.31eoyz-qmf@mercury.scss.tcd.ie> <d7ec110f-2a0b-cf97-94a3-eeb5594d8c24@cs.tcd.ie> <CAOgPGoDpreyWcaLG_bMvEmMk1KvMQEGhXB+Ro+f1BKf3p_DxOA@mail.gmail.com> <4e1ab8ca-e977-7273-358b-3df3670d0ee5@cs.tcd.ie> <D1FFA72D-28B8-4435-B069-5EE1563E26B2@fugue.com> <CALZ3u+Z6DWMwKF6eoDJ2h5ABRGpeYrqZUyesnYhHP5g1d8rQ1Q@mail.gmail.com> <CAPsNn2Xtkjzkvwhmr6ZYvZ+VqjDFnnKM4QvqKVkXvt+WHZ4iJw@mail.gmail.com> <dabb224c-f679-2bf9-77f7-44c905b9887d@cs.tcd.ie> <CAPsNn2W-YQpwq_W_G0M5LZRnmN=DoG-Ufmcz-Kf-HQN_ckKSmg@mail.gmail.com> <964d23e3-fe80-f785-f3d6-aa0a3cda4470@cs.tcd.ie>
From: nalini elkins <nalini.elkins@e-dco.com>
Date: Wed, 14 Mar 2018 17:05:52 -0700
Message-ID: <CAPsNn2Vn=7jkF=sfpm5XRFMYRj0qM-Uvfm0FtbRHVCwirOqm6Q@mail.gmail.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Cc: Artyom Gavrichenkov <ximaera@gmail.com>, "<tls@ietf.org>" <tls@ietf.org>, Benjamin Kaduk <kaduk@mit.edu>
Content-Type: multipart/alternative; boundary="94eb2c1148b64ac7d905676841c8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/XTxsYOPsDWIyy_xTg5k5JVwp-mk>
Subject: Re: [TLS] TLS@IETF101 Agenda Posted
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Mar 2018 00:05:56 -0000

Stephen,

More on other points later. I am getting pretty tired as am jet lagged.

>I am just fine with talking openly on the mailing list, as
>per IETF processes. I see no benefit in smokey back room
>discussions here at all, and only downsides to such.

You know, this issue of side or quiet conversations keeps coming up.   Let
me try to clarify what I feel is a misunderstanding.

In other WGs, we talk to each other sometimes in small groups, sometimes
one to one to try to clarify things.  The result ends up in the draft or
the public email list, as appropriate.

There is no question of a smokey back room.

I remember a while back when I had a lengthy disagreement with someone
which kept not getting resolved, someone (actually, Al Morton - dear sweet
guy!) took me by the scruff of the neck and made the two of us sit down
together with him.  In half an hour, we resolved the point and were able to
continue with the draft.  If we had kept throwing things at each other, as
it is easy to do via email, who knows how long the conflict would have
lasted.  I learned a valuable lesson that day.

So, I am not trying to subvert the process as some seem to imply.   Talking
to each other f2f actually seems to me to be one of the points of
journeying quite so far and spending so much money to come to an IETF
meeting.  (Having said that, the "journeying so far part" or plane trip is
catching up with me!   More tomorrow.)

Nalini









On Wed, Mar 14, 2018 at 4:49 PM, Stephen Farrell <stephen.farrell@cs.tcd.ie>
wrote:

>
>
> On 14/03/18 23:32, nalini elkins wrote:
> > But, it is a very difficult issue.   If I can use a different analogy, if
> > the City of Monterey built a new sewer system and told me that to connect
> > to it, I had to build a new house, I would scream!
>
> Analogies cannot be used to draw conclusions, merely to illustrate.
> That analogy doesn't help illustrate anything for me fwiw.
>
> > TLS is used in many, many places.  The Internet is critical to the
> > businesses of the world.
>
> Yes. Both fine reasons to not mess about with, weaken or
> try break the TLS protocol.
>
> BTW - while you and others may constantly over-claim and
> say your consortium represents "enterprises," I assume you
> do not claim to represent all "business." ;-)
>
> >  You can't just say use something other than
> > TLS.
>
> Yes. I can. Kerberos and IPsec are used within many enterprise
> networks. TLS is not the only tool in the toolbox.
>
> If your consortium want a multi-party security protocol that
> does not affect other folks' security as you seem to claim,
> then that is the obvious route to explore. And that protocol
> needs to be non-interoperable with TLS (maybe even non-confusable
> in some stronger sense) IMO in order to avoid the risks that
> breaking TLS would result in us all taking.
>
> > Or don't use the Internet.  It's not so easy.
>
> I never said that. Why invent something like that?
>
> > I wish we could actually talk to each other quietly and reasonably.  This
> > is a very, very difficult problem.
>
> I am just fine with talking openly on the mailing list, as
> per IETF processes. I see no benefit in smokey back room
> discussions here at all, and only downsides to such.
>
> S.
>
>
>


-- 
Thanks,
Nalini Elkins
President
Enterprise Data Center Operators
www.e-dco.com