Re: [Cryptography] Opening Discussion: Speculation on BULLRUN

2013-09-09 Thread Joly MacFie
In case you missed it, Jari Arkko, Chair of the IETF and Stephen Farrell, IETF Security Area Director, just posted: http://www.ietf.org/blog/2013/09/security-and-pervasive-monitoring/ -- --- Joly MacFie 218 565 9365 Skype:punkcast

Re: [Cryptography] Opening Discussion: Speculation on BULLRUN

2013-09-08 Thread Eugen Leitl
: [Cryptography] Opening Discussion: Speculation on BULLRUN On 09/07/2013 05:03 PM, Phillip Hallam-Baker wrote: Good theory only the CA industry tried very hard to deploy and was prevented from doing so because Randy Bush abused his position as DNSEXT chair to prevent modification of the spec to meet

Re: [Cryptography] Opening Discussion: Speculation on BULLRUN

2013-09-08 Thread Jorge Amodio
To: Phillip Hallam-Baker hal...@gmail.com Cc: cryptogra...@metzdowd.com cryptogra...@metzdowd.com, ianG i...@iang.org Subject: Re: [Cryptography] Opening Discussion: Speculation on BULLRUN On 09/07/2013 05:03 PM, Phillip Hallam-Baker wrote: Good theory only the CA industry tried very hard to deploy

Re: [Cryptography] Opening Discussion: Speculation on BULLRUN

2013-09-08 Thread Eugen Leitl
i...@iang.org Subject: Re: [Cryptography] Opening Discussion: Speculation on BULLRUN User-Agent: Mutt/1.5.21 (2010-09-15) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Sep 07, 2013 at 09:14:47PM +, Gregory Perry wrote: And this is exactly why there is no real security

Re: [Cryptography] Opening Discussion: Speculation on BULLRUN

2013-09-08 Thread Jimmy Hess
On Sun, Sep 8, 2013 at 9:07 AM, Eugen Leitl eu...@leitl.org wrote: 1. [...] In general the consuming public cannot tell the difference between “good stuff” and snake oil. So when presented with a $100 “good” solution or a $10 bunch of snake oil, guess what gets bought. Or

Re: [Cryptography] Opening Discussion: Speculation on BULLRUN

2013-09-08 Thread Jean-Francois Mezei
With regards to the 10$ snake oil security product versus the real one at $100: since the NSA can break both, they are both worth worth $0 in terms of privacy. From a business/corporate point of view, there are two aspects: 1- Image: If your weak security has allowed a data breach to become

Re: [Cryptography] Opening Discussion: Speculation on BULLRUN

2013-09-08 Thread Doug Barton
...@metzdowd.com, ianG i...@iang.org Subject: Re: [Cryptography] Opening Discussion: Speculation on BULLRUN On 09/07/2013 05:03 PM, Phillip Hallam-Baker wrote: Good theory only the CA industry tried very hard to deploy and was prevented from doing so because Randy Bush abused his position as DNSEXT chair