Hey Mark,

* Mark Risher <[email protected]> [04/04/2016 23:49:55] wrote:
> This is cool. How far along is it? One issue we ran into with
> STARTTLS-Everywhere was where it would be hosted.

We're just starting (April). We've had a few video-calls that were a
mix of organizing and hackathon fixing trivial open issues, PRs and
reading up/documenting on what's changed TLS-wise in mail daemon
software over the years. I'll start working considerably more on the
project this month, hopefully we'll have more to show in the near
future.

> This is similar to what we were discussing with Certificate
> Transparency,
> i.e. some sort of append-only log for policies published and
> policies
> discovered.

I was actually also thinking of distributed append-only logs. I'm
open to collaborate on that, would be very useful to us. git has
been suggested as a (maybe temporary) distribution platform, but
I'd prefer a solid design with distributed append-only logs.

> More like the latter. We've been discussing with the CT folks how
> it could
> be extended for DV certs, what extensions would be needed, and
> whether to
> allow self-signed. We moved that to "Future Work" so as not to
> derail the
> short-term, and because someone recommended against writing a
> draft that
> depends on another draft, but it remains an interesting
> alternative
> solution to the cryptographically-secure distributed hashtable
> problem.

Yes, very interesting. Please keep me in the loop if that's OK with
you guys, might also be something that should (for now) be discussed
off-list?

The STS suggested error-reporting feature is something that makes
sense as a seperate draft, as others could use it for different/
augmented data as well if spec'd in the right way. I'm open to
collaborate and will have (finally!) more time for all that email
related stuff now.

Thanks,
Aaron

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Uta mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/uta

Reply via email to