Re: [TLS] Please discuss: draft-housley-evidence-extns-00<

[Martin Rex <martin.rex@xxxxxxx>]

Mark Brown wrote:
> 
> Isn't this attack possible with today's web sales?  I mean, once you give
> your credit card to anyone, can't they ring you out at any price they want?
> You don't need a website or TLS to do this attack.  You can do this on the
> phone or via mail order.
> 
> So in the case of TLS Evidence, you both have a record of (1,499,999.-)
> instead of what the buyer thought, (99,999.-).  So what?  In both cases the
> buyer cancels the order.  You don't need TLS Evidence to cancel...with
> either the merchant or by contacting your credit card issuer.

No I am confused.

Since you just completely disclaimed the usefulness of TLS evidence
for just about every business application, what's left?

I don't see anything besides law enforcement, and I have serious
problems in making cleartext escrow plus digital signing of
the communication an IETF working group item.

-Martin

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls