Re: [TLS] Please discuss: draft-housley-evidence-extns-00 - brokerage illustration

[Martin Rex <[e-mail]>]

Mark,

Mark Brown wrote:
> 
> Below is an illustration of how to use TLS Evidence for a brokerage
> transaction.

I appreciate your efforts, but I'm running out of time with this
debate.  I'm behind on my development schedule and need to go back
do the work I'm being paid for.


There will always be means to use a inappropriate technology
for an inadequate solution, I can see it every day when deployed technology
is frobbed^Wretrofitted for a purpose for which it wasn't designed.
However, it is a pretty bad idea to start off with a technology
that fits common scenarios in home/office/businesses so poorly
as TLS Evidence and has such a huge abusive potential.


I know that there is a huge economic motivation for government agencies
to be able to purchase equiment on the free market that suits their
needs rather than having to develop it on their own.  This is one of
the reasons how/why TPM sneaked into modern business computers for
the mass market.

There is some truth in what Peter says, the proposal is so well designed,
and many of the things people recognize as problems are there on a
purpose and integral part of the proposal, so the most severe problems
are beyond repair.  IMHO, if TLS Evidence is rubberstamped, it means that
the IETF has been subverted sucessfully.


If this technology enters the maintstream, then the agencies will
start harvesting the results.  They've been pretty firm in how
much they like and intend to expand surveillance, and they are
regularly breaking the laws in order to collect information
to which they're not entitled.

The most effective security measure is not protecting data with
strong crypto and high assurance, it is not creating -- or where
it needs to be created and processed -- not persisting it.


As far as risk management is concerned, TLS Evidence is probably
the largest can of worms I've ever seen.  Since I've started thinking
about this technology, I discover at least one major new problem every day
(acutally every night when I try to get asleep), and I have the feeling
that I've only seen the tip of the iceberg so far.


-Martin 

_______________________________________________
TLS mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/tls