Hi Panos,
Doesn't at least one of Amazon's TLS libraries counter the exact class
of technical concerns raised in this and related threads?
Shouldn't TLS as a protocol follow that lead? I would support it.
On 7/16/26 22:34, Kampanakis, Panos wrote:
+1 for Deb. The criticism is unfounded, unfair, and conspiracy-
theoretical, it must stop.
There is little that is conspiracy-theoretical here but if you see
something, be specific please. Most of what has been raised, especially
with citations provided, is well established factually. There are
Corporate Partners, and lifetime obligations.
The majority of the questions presented to Deb in her role as a person
in IETF leadership are well founded. The discussions are uncomfortable
at times but almost everyone is trying to keep it professional.
Evading direct questions that the leadership should be able to easily
answer is making that worse. Most of the questions and phrasing are
seeking understanding where in the end everyone can evaluate the matter
for themselves.
For clarity, do you work directly with the (former NSA) co-author of
Extended Random in the Amazon AWS cryptography group or are you in a
different department?
If so: I would encourage you to have a conversation with them about the
purpose of Extended Random and also about NSA's involvement in the IETF
as part of PROJECT BULLRUN. Probably some of the other NSA alumni in the
Amazon crypto team know various aspects but the former NSA leadership
would know best.
I am fairly certain that if there is no problem then they will directly
answer you. That could actually help here because then you could return
here to help us settle the matter with your newly found insight. Unless
you aren't interested or, for example, a life time obligation prevents
such conversations. They are all extremely smart people and while we
obviously have some policy disagreements, we can be respectful while not
bowing our heads or accepting deflections from the issues that are part
of the IETF's mission.
There are probably other reasons that this is such a challenge. Making
this about a single person is missing the point. No one has a personal
problem with Deb as far as I can tell. I would even go so far as to say
that we have reached rough consensus on at least one thing here: Deb's
character is great and not at all in question.
Kind regards,
Jacob Appelbaum
_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]
