Re: [TLS] Please discuss: draft-housley-evidence-extns-00 - brokerage illustration

[Martin Rex <[e-mail]>]

Mark Brown wrote:
> 
> Below is an illustration of how to use TLS Evidence for a brokerage
> transaction.

Since you keep refering to brokerage transactions, audit trail, Microsoft
is participating the discussion, and TLS Evidence is being designed
to be able to work "transparently" (=concealed), I'm wondering
whether this is primarily targetted for the financial sector
and stock exchanges.  That's already a fairly regulated area,
and an area where massive legal and illegal wire-tapping is
ongoing (e.g. SWIFT).

The agencies might be looking for a means to capture the evidence
even for a larger amount of deployed software, so a transparent
(or actually concealed) plug-in to the TLS stack might be
attractive to them.  Performance is likely an issue there as well,
so the approach of hosting the transaction "forms" (actually the
reveiving URLs for the HTTP Post on a dedicated Web-Server might
be the easiest way to cut down the audit trail considerably,
improve the performance and reduce the necessary changes in
the backend significantly...

It appears that for the audit trail on the backend a windows box
with a tls-terminating loadbalancer or reverse-proxy is envisioned,
and the frontends are probably all windows PCs these days.

-Martin

_______________________________________________
TLS mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/tls