[Trans] [trans] #58 (rfc6962-bis): Maximise number of STH's published per time unit
"trans issue tracker" <trac+trans@tools.ietf.org> Thu, 05 February 2015 14:14 UTC
Return-Path: <trac+trans@tools.ietf.org>
X-Original-To: trans@ietfa.amsl.com
Delivered-To: trans@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AA8C1A88BA for <trans@ietfa.amsl.com>; Thu, 5 Feb 2015 06:14:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lth1P4Qf4VFf for <trans@ietfa.amsl.com>; Thu, 5 Feb 2015 06:13:58 -0800 (PST)
Received: from zinfandel.tools.ietf.org (zinfandel.tools.ietf.org [IPv6:2001:1890:123a::1:2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 592FA1A88C3 for <trans@ietf.org>; Thu, 5 Feb 2015 06:13:50 -0800 (PST)
Received: from localhost ([::1]:52284 helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from <trac+trans@tools.ietf.org>) id 1YJNBb-00077B-CY; Thu, 05 Feb 2015 06:13:39 -0800
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: trans issue tracker <trac+trans@tools.ietf.org>
X-Trac-Version: 0.12.3
Precedence: bulk
Auto-Submitted: auto-generated
X-Mailer: Trac 0.12.3, by Edgewall Software
To: draft-ietf-trans-rfc6962-bis@tools.ietf.org, linus@nordu.net
X-Trac-Project: trans
Date: Thu, 05 Feb 2015 14:13:39 -0000
X-URL: http://tools.ietf.org/trans/
X-Trac-Ticket-URL: http://trac.tools.ietf.org/wg/trans/trac/ticket/58
Message-ID: <055.b793219aebf9d4b50b2e649d13c13ebe@tools.ietf.org>
X-Trac-Ticket-ID: 58
X-SA-Exim-Connect-IP: ::1
X-SA-Exim-Rcpt-To: draft-ietf-trans-rfc6962-bis@tools.ietf.org, linus@nordu.net, trans@ietf.org
X-SA-Exim-Mail-From: trac+trans@tools.ietf.org
X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false
Resent-To: agl@google.com, benl@google.com, ekasper@google.com, eranm@google.com, rob.stradling@comodo.com
Archived-At: <http://mailarchive.ietf.org/arch/msg/trans/R9cCsWeUSkquAqsponsXcb5GWPM>
Cc: trans@ietf.org
Subject: [Trans] [trans] #58 (rfc6962-bis): Maximise number of STH's published per time unit
X-BeenThere: trans@ietf.org
X-Mailman-Version: 2.1.15
List-Id: Public Notary Transparency working group discussion list <trans.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/trans>, <mailto:trans-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/trans/>
List-Post: <mailto:trans@ietf.org>
List-Help: <mailto:trans-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/trans>, <mailto:trans-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Feb 2015 14:14:00 -0000
#58: Maximise number of STH's published per time unit Logs can mount a fingerprinting attack against clients by issuing separate STH's for clients the wish to track. This could be thwarted by the standard stipulating a maximum number of STH's that a log is allowed to issue per time unit before it is considered bad. Monitors should be able to detect if a log ignores this limitation. A fair figure might be max one STH per hour, unless someone sees a need for a higher frequency. Implementation wise, you might want this to be configurable for debugging purposes. -- -------------------------+------------------------------------------------- Reporter: | Owner: draft-ietf-trans- linus@nordu.net | rfc6962-bis@tools.ietf.org Type: defect | Status: new Priority: major | Milestone: Component: rfc6962-bis | Version: Severity: - | Keywords: -------------------------+------------------------------------------------- Ticket URL: <http://trac.tools.ietf.org/wg/trans/trac/ticket/58> trans <http://tools.ietf.org/trans/>
- Re: [Trans] [trans] #58 (rfc6962-bis): Stipulate … trans issue tracker
- Re: [Trans] [trans] #58 (rfc6962-bis): Limit the … trans issue tracker
- [Trans] [trans] #58 (rfc6962-bis): Maximise numbe… trans issue tracker
- Re: [Trans] [trans] #58 (rfc6962-bis): Limit the … trans issue tracker
- Re: [Trans] [trans] #58 (rfc6962-bis): Limit the … trans issue tracker