there are a lot of us lurkers out here a bit horrified watching this wg go off the rails.
it would help if vendors of devices which break privacy would stop speaking for 'datacenters' and let datacenters speak for themselves. i have not seen any doing so. my $dayjob has >10 medium sized datacenters serving everything from banks to telcos to scaled cloud services. i can not find folk in our datacenter groups who see a need to break e2e encryption. if the interception proposals ensured that user is notified and able to prevent session interception, then i would believe this. but if they do not, then let's face it, this is all about selling surveillance gear to snooping enterprises and repressive regiemes where people with guns take you away at 3am because your session was decoded. can we please provide real end to end privacy or call this wg something else? randy _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls