RE: [TLS] Please discuss: draft-housley-evidence-extns-00 - use to

[Stefan Santesson <stefans@xxxxxxxxxxxxx>]

> A well engineered approach would not use a shotgun approach to
> security, but instead a tailored design that meets exactly
> the needs of the application, can be used for programmatically
> checking consistency an can create digital tamper-resistant
> proofs of transactions that contain all and only the necessary
> information that is necessary -- in which case it will be
> possible make it conforming with individual, case-specific
> legal and buisiness requirements.
>

Yes, don't we all wish we had that. Especially that we could agree on what "all and only the necessary
information that is necessary" is.

Another 10 years will pass before we get there unfortunately. In the meanwhile we will continue to conduct business based on passwords and totally spoofable security. In security, perfect has always been the enemy of the good.


Stefan Santesson
Senior Program Manager
Windows Security, Standards



_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls