Re: [TLS] Malware (was Re: draft-green-tls-static-dh-in-tls13-01)

["Roland Dobbins" <[e-mail]>]

On 17 Jul 2017, at 20:35, Blumenthal, Uri - 0553 - MITLL wrote:

> :-) It’s the Law Enforcement job to make the dumber ones disappear.

We aren't talking about law enforcement, per se - and it's law 
enforcement's job to make them *all* disappear.

> Let’s exchange our criminals – I’d much rather deal with yours. 
> ;-)

Sadly, I have to deal with all kinds.  I don't have the luxury of being 
selective, worse luck.

;>

> My point though is – this dropoff in visibility *will* come, like it 
> or not.

When that begins to occur in perceptible increments, then it's time to 
revisit.  But avoiding breaking existing, useful mechanisms is something 
we should strive for, IMHO.

> Based on my experience troubleshooting – I disagree. If I control at 
> least one end of the communications – I have all the visibility into 
> the traffic that I need.

Based on my experience troubleshooting, I disagree with your 
disagreement; while in many circumstances a great deal can be inferred 
from one end, it's sometimes vitally necessary to gain visibility from 
multiple points in the relevant topological scope.  Perhaps the scope 
and complexity of what we respectively troubleshoot differs 
considerably.

-----------------------------------
Roland Dobbins <[e-mail]>