RE: [TLS] Please discuss: draft-housley-evidence-extns-00<

[Stefan Santesson <stefans@xxxxxxxxxxxxx>]

Martin,

I would expect that the reality around this is more dynamic and complex than your statement.
But it is an interesting aspect that should not be neglected.
I will do my own checks.

Stefan Santesson
Senior Program Manager
Windows Security, Standards


> -----Original Message-----
> From: Martin Rex [mailto:martin.rex@xxxxxxx]
> Sent: den 10 januari 2007 12:32
> To: Stefan Santesson
> Cc: tls@xxxxxxxx
> Subject: Re: [TLS] Please discuss: draft-housley-evidence-extns-00<
>
> Stefan Santesson wrote:
> >
> > The proposal can provide a relatively simple mechanism to
> > authenticate events, such as agreements, conducted over a TLS session
> > and there is no working, off the shelf, alternative solution
> available
> > today that works cross platforms.
> >
> > Example scenario:
> > The server side wants to present a some data to the client that the
> > user has to accept. Such as agreeing to a purchase order.
>
> OK, I'll try to make it short:
>
> There is absolutely NONE, ZERO, NIL chance that this can be used
> in customer<->business relationsships in the European Union, because
> it is incompatible with the EU data protection directive in many ways.
>
> -Martin

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls