IETF Logo Mail Archive

Re: [Trans] text to address DKG's conspiring CAs attack

Ben Laurie <benl@google.com> Thu, 31 March 2016 11:38 UTC

Return-Path: <benl@google.com>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 931DE12D59B for <trans@ietfa.amsl.com>; Thu, 31 Mar 2016 04:38:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.71
X-Spam-Level:
X-Spam-Status: No, score=-2.71 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gR7jXw7a6W7M for <trans@ietfa.amsl.com>; Thu, 31 Mar 2016 04:38:13 -0700 (PDT)
Received: from mail-ig0-x235.google.com (mail-ig0-x235.google.com [IPv6:2607:f8b0:4001:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C2DE12D5AA for <trans@ietf.org>; Thu, 31 Mar 2016 04:38:12 -0700 (PDT)
Received: by mail-ig0-x235.google.com with SMTP id ui10so55904695igc.1 for <trans@ietf.org>; Thu, 31 Mar 2016 04:38:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=nc/MV1xLBZXpehjODgci/rG2AE+Xs0+BbX/3vRlrTFM=; b=o0GgOq+Zy9cXYwU2gZp/x1Y81Ja096IxKpZQuHmy4mqt7wR61PYVye16cjacaIdvyo Vouocz83LAIS6ptfYm0HGeQJU8qNmFFB9zTwcCYDRQXeIUJgd6kLBbRkMKA9bu0qvUkq UHMMVyxtOvHOnScLIgwhNx+5A3HWVxTFMX1H1to9sPsr+K90S0cHtHWMf+28w1HvZBPf R661j3ZiSxfVyCMBVx8aTyIKqkBjCEkbjPI8k+Oc0GQDYiERmQUw34ufL8ATdAbtf5LM FQJXwH0iGVEflEuIhzoX+JcgcSG1ik4Lfko+0qqYecHwoNGzY+U2P/ZbBtSEJ1CUDjVz Bang==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=nc/MV1xLBZXpehjODgci/rG2AE+Xs0+BbX/3vRlrTFM=; b=B0RPokqOFbBzHkc4HYQngC+WJpMKJeHyAyatOLap6T/hzn6Lt9oaExf5ZAc170TThQ QtjqSI5ssMvcgCqDVP7YmUEpVcc75aFzpzb4yRBWWajnw8vTW4y4gTfhpHun5eAb9aap 2sVMANDQWDSZn0czNJnGrs6PUsvdXXWjQRlQB3xZYyKmBEKFzITspX+yK3bDkBSp7SxG WE9CIxIxePyDKs/VJZy5kcRBnBfDqaYwomVMzX+8eQPKXjWLRMY/JTHFPAc/xKyXplYv A2DRHfvwXczBCcQ1p4BY3aUe9Dcd61tdZ/xcoYJc2omL8z3OMOi3/tVIwbSHHNokoKpb 6LVg==
X-Gm-Message-State: AD7BkJIAmH00WKw0NSW5hk1o0bs8zlOYIjoigmRgDabxCK1mew2pN3pXy+xhxpHrGZTq0MXsdXDHZm7wLCNlq0pc
MIME-Version: 1.0
X-Received: by 10.50.78.234 with SMTP id e10mr19943406igx.32.1459424291262; Thu, 31 Mar 2016 04:38:11 -0700 (PDT)
Received: by 10.64.245.105 with HTTP; Thu, 31 Mar 2016 04:38:11 -0700 (PDT)
In-Reply-To: <56FC0A65.5060602@gmail.com>
References: <56E6CD30.8070102@bbn.com> <56E822E8.7000704@nist.gov> <56E99C1B.4080602@bbn.com> <56E9A1FF.4050301@nist.gov> <56EAC993.20200@bbn.com> <56EADAA6.6010306@nist.gov> <56F4032F.9030800@bbn.com> <56F57879.5060005@nist.gov> <56FBE1C9.9020000@bbn.com> <56FBF88F.2050407@nist.gov> <CACsn0cnd72UxwtzxHoZTChTDdd6My-EnR4YKE-aD8GRvjngqMQ@mail.gmail.com> <56FC0720.5090204@nist.gov> <56FC0A65.5060602@gmail.com>
Date: Thu, 31 Mar 2016 12:38:11 +0100
Message-ID: <CABrd9SRU4rpWEp9UhfBSniVhc1QDcPTnqQ_e6VFEcALwLMXArQ@mail.gmail.com>
From: Ben Laurie <benl@google.com>
To: Melinda Shore <melinda.shore@gmail.com>
Content-Type: multipart/alternative; boundary="089e013c65e07598ef052f56b207"
Archived-At: <http://mailarchive.ietf.org/arch/msg/trans/EdpUzFFutLJJ7lhWlQn4624-TD0>
Cc: "trans@ietf.org" <trans@ietf.org>
Subject: Re: [Trans] text to address DKG's conspiring CAs attack
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 31 Mar 2016 11:38:14 -0000

On 30 March 2016 at 18:18, Melinda Shore <melinda.shore@gmail.com> wrote:

> We have working group agreement that the attack described
> by DKG needs to be documented and included in the threat
> draft.  The draft is not going to back into working group
> last call without it, period.
>

I should reiterate that this is _not_ an attack on CT, but on RFC 5280. Is
our document the right place for it?

v2.46.0 | Report a Bug | By Email | System Status