Re: [Trans] Threat model outline, attack model

Stephen Kent <kent@bbn.com> Thu, 02 October 2014 16:13 UTC

Return-Path: <kent@bbn.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED2CE1A8760 for <trans@ietfa.amsl.com>; Thu, 2 Oct 2014 09:13:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.987
X-Spam-Level:
X-Spam-Status: No, score=-4.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uzIyDwJ-P7Gs for <trans@ietfa.amsl.com>; Thu, 2 Oct 2014 09:13:43 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09EFF1A0158 for <trans@ietf.org>; Thu, 2 Oct 2014 09:13:39 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:38305 helo=comsec.home) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1XZj0o-000Eqi-1F; Thu, 02 Oct 2014 12:13:50 -0400
Message-ID: <542D79AD.3070702@bbn.com>
Date: Thu, 02 Oct 2014 12:13:33 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: David Leon Gil <coruus@gmail.com>
References: <5411E511.1040605@bbn.com> <CABrd9STmog8-JZCg9Tfv_ToUswY=9LBcZAPQM2cqUVcO0dhAnQ@mail.gmail.com> <54173589.3000404@bbn.com> <CABrd9SRShqm1r-2ajbqD5w1s686ciyjcEvywsXZaapgmi57NsA@mail.gmail.com> <54242F8A.2080602@bbn.com> <CABrd9SSwAdv-mAgofNT6bMWky7q=bZhAaX=L4gZUQDkROQ-3ZA@mail.gmail.com> <54258AF0.7090602@bbn.com> <CABrd9SQNXHdJQCC3JQJirqdkg_ub0oXCkxPqit9H6LjUPqNioA@mail.gmail.com> <54297249.1090409@bbn.com> <CABrd9ST59Yd3GDjxMiX9jMg68_BRd2_v0Mpo8u_oW1zM1VWjjA@mail.gmail.com> <542C1063.50404@bbn.com> <CAA7UWsW06qYWfO_CDGEvhR2OJbiodrJ96qPuz=6-DnK4XNdR7g@mail.gmail.com>
In-Reply-To: <CAA7UWsW06qYWfO_CDGEvhR2OJbiodrJ96qPuz=6-DnK4XNdR7g@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/trans/AkX6Tmmxuv-R5yEwWK4Vxeqcrdw
Cc: "trans@ietf.org" <trans@ietf.org>, Ben Laurie <benl@google.com>
Subject: Re: [Trans] Threat model outline, attack model
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Oct 2014 16:13:48 -0000

David,

> On Wed, Oct 1, 2014 at 10:32 AM, Stephen Kent<kent@bbn.com>  wrote:
>> If a "broader scope" means using more ambiguous terms, I can't see why that would be an improvement.
>> It has the flavor of "CT is obviously good, so let's just do it."
> Okay. You've convinced me.
>
> So: I've disabled syslog on all my servers. I can't define a-priori
> what security issues logging might detect. Thus there's no point in
> logging anything.
This is a very poor analogy for many reasons, as Greg has already noted.

Steve