Re: [VoT] Clause 7 edgy on scope? (RE: Vectors of Trust I-D)

[Mark Lizar <[e-mail]>]

nice and crisp.

I can really start to imagine how discovery and trust marks can be used to scale trust. Although there is some additional issues around the overarching trust framework (whatever that is, I am assuming law). For example assessing trust marks so that they are appropriate for the purpose and also for application in the framework, with a robust method for assessing and asserting integrity of trust marks.  In this context then I think it would be clear how the trust marks fit with VOT.  Its the gap between these elements I suspect that needs to be further articulated and understood.

nicely thought provoking   ..

> On 30 Jun 2015, at 02:35, Grassi, Paul A. <[e-mail]> wrote:
> 
> I personally like the idea of discoverability at the onset, and the discussion that will follow.
> 
> This was great to read, thanks to you and Leif for the work!
> 
> On Jun 29, 2015, at 8:49 PM, "Justin Richer" <[e-mail] <mailto:[e-mail]>> wrote:
> 
>> Colin, that’s a great question, because I’m honestly not sure what the answer is yet. I think that the vectors only make sense in the context of some kind of trust framework setup, but that sometimes those policies will be hard-coded at configuration time and won’t need to be dynamically bound or discovered. That said, I think the real value of this is going to be cross-domain where an RP could subscribe to (and understand) multiple trust marks and be able to validate them at runtime. Still, that piece might be separable enough, and perhaps substantive enough, to be its own draft.
>> 
>> That said, I figured I’d write it down down and figure out where it’s actually supposed to go later. :)
>> 
>>  — Justin
>> 
>>> On Jun 29, 2015, at 7:14 PM, Colin Wallis <[e-mail] <mailto:[e-mail]>> wrote:
>>> 
>>> Many thanks Justin and Leif
>>> 
>>> I’ve done a first pass/light read, and from that, I think it is a terrific first cut that gets us on the path to normalizing the discussions over the past 9 months.
>>> 
>>> Aside from a few tidy ups, I just have this slight concern whether all of Clause 7 (Discovery and Verification) is in scope for normative text?
>>> I certainly appreciate that in most implementations and deployments, there would be a dependency on an operational trust framework and trustmark.
>>> But is it too big a stretch to make that normative for this work?
>>> Just a thought.. and more than happy to be proven wrong.. J.
>>> 
>>> Cheers
>>> Colin
>>> 
>>> 
>>> From: vot [mailto:[e-mail] <mailto:[e-mail]>] On Behalf Of Justin Richer
>>> Sent: Saturday, 27 June 2015 3:15 p.m.
>>> To: [e-mail] <mailto:[e-mail]>
>>> Subject: [VoT] Vectors of Trust I-D
>>> 
>>> Hi Everyone,
>>> 
>>> I have taken the initial strawman proposal along with a substantial number of edits and inputs from several folks and have created an initial I-D of the document:
>>> 
>>> https://tools.ietf.org/id/draft-richer-vectors-of-trust-00 <https://tools.ietf.org/id/draft-richer-vectors-of-trust-00>
>>> 
>>> It’s still a very drafty draft, but hopefully it’s starting to make this a concrete thing. Please read it over and discuss it here on the list.
>>> 
>>> I would like to propose a bar-BoF in Prague for VoT for anyone who would like to discuss this. If you’re interested (and will be there in person), let me know!
>>> 
>>>  — Justin
>> 
>> _______________________________________________
>> vot mailing list
>> [e-mail] <mailto:[e-mail]>
>> https://www.ietf.org/mailman/listinfo/vot <https://www.ietf.org/mailman/listinfo/vot>
> _______________________________________________
> vot mailing list
> [e-mail] <mailto:[e-mail]>
> https://www.ietf.org/mailman/listinfo/vot <https://www.ietf.org/mailman/listinfo/vot>