[TLS]Re: Trust Anchor Negotiation Surveillance Concerns and Risks

2024-07-20 Thread Ilari Liusvaara
On Fri, Jul 19, 2024 at 09:39:32PM -0700, Watson Ladd wrote: > On Fri, Jul 19, 2024, 8:58 PM Salz, Rich > wrote: > > > > I’m a little skeptical of approaches that solve an entire problem > > space with one architecture. I’m more skeptical of enough people > > having the ability to read and underst

[TLS]Re: Trust Anchor Negotiation Surveillance Concerns and Risks

2024-07-20 Thread Mike Shaver
On Sat, Jul 20, 2024 at 8:59 AM Ilari Liusvaara wrote: > Allowing various embedded and IoT stuff to migrate off of WebPKI would > be of immense value. Such stuff using WebPKI has been source of gigantic > amount of pain. I agree with your second sentence very much, but I don’t understand your f

[TLS]Re: Trust Anchor Negotiation Surveillance Concerns and Risks

2024-07-20 Thread Ilari Liusvaara
On Fri, Jul 19, 2024 at 09:11:34PM -0700, Nick Harper wrote: > On Fri, Jul 19, 2024 at 8:58 PM Salz, Rich 40akamai@dmarc.ietf.org> wrote: > > > Can we simplify things and solve just one problem? > > > > >From my perspective, this draft does solve just one problem: how a server > chooses a ce

[TLS]Re: Trust Anchor Negotiation Surveillance Concerns and Risks

2024-07-20 Thread Salz, Rich
Have you read the second draft (draft-beck-trust-anchor-ids)? No. That’s on me, sorry. ___ TLS mailing list -- tls@ietf.org To unsubscribe send an email to tls-le...@ietf.org

[TLS]Re: Trust Anchor Negotiation Surveillance Concerns and Risks

2024-07-20 Thread David Benjamin
On Sat, Jul 20, 2024, 06:13 Mike Shaver wrote: > > > On Sat, Jul 20, 2024 at 8:59 AM Ilari Liusvaara > wrote: > >> Allowing various embedded and IoT stuff to migrate off of WebPKI would >> be of immense value. Such stuff using WebPKI has been source of gigantic >> amount of pain. > > > I agree w