Re: [TLS] Please discuss: draft-housley-evidence-extns-00<<

home_pw@msn.com wrote:
> 
> We have to move on. Class C student Peter has his hands on 
> $100 RIP2-capable 802.11i/802.1X gigabit 
> router/switches/bridge/SPIfirewall, doing radius and EAP-TLS 
> over PPPoE, with hardware IPSEC & GRE tunneling support. He 
> and 14 year old Abdul Rahman XXVIth, son of the supermarket 
> owner where they are sold, are both having fun configuring 
> them to work with the TPM EAP-TLS module in their birthday 
> Vista PCs, doing everything that research students were 
> doing 10 years ago to (slowly) get higher assurance out of 
> commodity technology - created mostly by that "evil" DoD 
> hidden agenda: its COTS policy.

High assurance at that level is a non-issue for everyone except those
secret cellar dwellers.

The only purpose that it may serve is either abusive or
locking out (free and OpenSource) competition from entire markets.

One of the most serious security problems that we have on the
internet today is phising and trojaning.  TLS Evidence is going
to make that only worse.

An adequate solution to the Ecommerce stuff would be a standardized
application-level information exchange protocol for transfering
signature request, signed content and signature verification and
trusted / highly assured visualization&signing devices somewhere
between a mobile phone and OLTP (i.e. <$50).  That is the cheapest
and most foolproof approach, and will leave the PC software platform
entirely open for development and competition for everyone.

The rest of the COTS PCs and software will continue its constand
feature creep, and remain bug-ridden and virus&worm plagued for
more than a decade.

-Martin

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls