IETF Logo Mail Archive

RE: [TLS] Please discuss: draft-housley-evidence-extns-00<

Stefan Santesson <stefans@microsoft.com> Fri, 12 January 2007 19:24 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1H5S0z-0000i8-7O; Fri, 12 Jan 2007 14:24:37 -0500
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1H5S0y-0000hl-01 for tls@ietf.org; Fri, 12 Jan 2007 14:24:36 -0500
Received: from smtp-dub.microsoft.com ([213.199.138.191]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1H5S0u-00030F-Ka for tls@ietf.org; Fri, 12 Jan 2007 14:24:35 -0500
Received: from DUB-EXHUB-C303.europe.corp.microsoft.com (65.53.213.93) by DUB-EXGWY-E801.partners.extranet.microsoft.com (10.251.129.1) with Microsoft SMTP Server (TLS) id 8.0.685.24; Fri, 12 Jan 2007 19:24:30 +0000
Received: from EA-EXMSG-C307.europe.corp.microsoft.com ([65.53.221.19]) by DUB-EXHUB-C303.europe.corp.microsoft.com ([65.53.213.93]) with mapi; Fri, 12 Jan 2007 19:24:29 +0000
From: Stefan Santesson <stefans@microsoft.com>
To: "home_pw@msn.com" <home_pw@msn.com>, "martin.rex@sap.com" <martin.rex@sap.com>
Date: Fri, 12 Jan 2007 19:24:27 +0000
Subject: RE: [TLS] Please discuss: draft-housley-evidence-extns-00<
Thread-Topic: [TLS] Please discuss: draft-housley-evidence-extns-00<
Thread-Index: Acc13hWpameOCbufSxmAFu6fE3aPhgAoB1Qw
Message-ID: <A15AC0FBACD3464E95961F7C0BCD1FF01D6E1194@EA-EXMSG-C307.europe.corp.microsoft.com>
References: <A15AC0FBACD3464E95961F7C0BCD1FF01D6E0EAA@EA-EXMSG-C307.europe.corp.microsoft.com>from "Stefan Santesson" at Jan 11, 7 06:33:08 pm<200701112043.VAA02623@uw1048.wdf.sap.corp> <A15AC0FBACD3464E95961F7C0BCD1FF01D6E0EE8@EA-EXMSG-C307.europe.corp.microsoft.com> <BAY126-DAV1531A9C0FA9A9E384EDBF092B00@phx.gbl>
In-Reply-To: <BAY126-DAV1531A9C0FA9A9E384EDBF092B00@phx.gbl>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 4d87d2aa806f79fed918a62e834505ca
Cc: "tls@ietf.org" <tls@ietf.org>
X-BeenThere: tls@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/tls>
List-Post: <mailto:tls@lists.ietf.org>
List-Help: <mailto:tls-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=subscribe>
Errors-To: tls-bounces@lists.ietf.org

I think we can clearly separate the issue of information sharing from an ID authentication technology from this draft dealing with capturing and signing information shared between two parties.

The relevant issue your raise is if the capturing of data from lower communication layers and storing them as part of a signed audit record can be problematic from a user integrity perspective. I think you have made strong arguments that it can.

I'm still trying to figure out exactly how big of a problem this is but this might very well be the reason why this proposal is a bad idea.

Stefan Santesson
Senior Program Manager
Windows Security, Standards


> -----Original Message-----
> From: home_pw@msn.com [mailto:home_pw@msn.com]
> Sent: den 11 januari 2007 16:10
> To: Stefan Santesson; martin.rex@sap.com
> Cc: tls@ietf.org
> Subject: Re: [TLS] Please discuss: draft-housley-evidence-extns-00<
>
> Stefan:
>
> http://europa.eu/rapid/pressReleasesAction.do?reference=IP/03/151&forma
> t=HTML&aged=0&language=EN&guiLanguage=en
>
>
> ----- Original Message -----
> From: "Stefan Santesson" <stefans@microsoft.com>
> To: <martin.rex@sap.com>
> Cc: <tls@ietf.org>
> Sent: Thursday, January 11, 2007 2:54 PM
> Subject: RE: [TLS] Please discuss:
> draft-housley-evidence-extns-00<
>
> Martin,
>
> Thank you for your elaborate answer and references.
> It would not surprise me though if Germany in this area is
> more radical than other EU countries, but that does not make
> your argument invalid.
>
>
> Stefan Santesson
> Senior Program Manager
> Windows Security, Standards
>
>


_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls

v2.29.0 | Report a Bug | By Email | System Status