IETF proposal to Prism-proof the Internet

Just about anyone can write a proposal to the IETF.

While IETF proposals should be evaluated based on their merit (rather than the author, etc.), there are three issues I have with this without reading too deeply into it:

(1) As other people have indicated, the IETF prefers to have proposals from groups of people - if for no other reason than some preliminary review of the ideas expressed in the proposal have been done. This proposal is single-sourced.

(2) The author is from Comodo - a Certificate Authority, and (reputedly) advocates greater use of the existing hierarchical structure of public-key/private-key security based on such authorities. There is a history of such authorities being compromised, and there is no apparent barrier to a government agency (US, Russia, Chinese, Nigerian, Syrian) from becoming an authority - all they need to do is subvert an existing authority or convince your OS or browser vendor to include them.

(3) This proposal is crudely cribbed from RFC 2629, as is evidenced from the title string “writing id-s using html”

None of these points address the technical merits of the proposal. They just discourage me from spending time reading it.

1 Like