Re: [TLS] Please discuss: draft-housley-evidence-extns-00<

[Martin Rex <martin.rex@xxxxxxx>]

Stefan Santesson wrote:
> 
> The proposal can provide a relatively simple mechanism to
> authenticate events, such as agreements, conducted over a TLS session
> and there is no working, off the shelf, alternative solution available
> today that works cross platforms.
> 
> Example scenario:
> The server side wants to present a some data to the client that the
> user has to accept. Such as agreeing to a purchase order.

OK, I'll try to make it short:

There is absolutely NONE, ZERO, NIL chance that this can be used
in customer<->business relationsships in the European Union, because
it is incompatible with the EU data protection directive in many ways.

-Martin

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls