Re: Problems with MSP

Donald E. Eastlake 3rd (dee@cybercash.com)
Tue, 20 Feb 1996 10:21:28 -0500 (EST)

The currently exists an IETF receipts Working Group.  URL for their 
charter is 
http://www.ietf.cnri.reston.va.us/html.charters/receipt-charter.html
Unfortunately I have not had the time to follow that group but I'll cc 
them on this message...

Donald

On Mon, 19 Feb 1996, Housley, Russ wrote:

> Date: Mon, 19 Feb 96 17:31:25 
> From: Housley, Russ <housley@spyrus.com>
> To: Raph Levien <raph@c2.org>
> Cc: resolving-security@imc.org
> Subject: Re: Problems with MSP
> 
> 
> Raph:
> 
> >>>I agree that MSP's signed receipt type is valuable, but see no reason 
> >>>why it can't be implemented as, say, a MIME receipt type which is then
> >>>signed with the standard MIME-based signature protocol. In other words, 
> >>>I see nothing inherent in MSP that enables this feature.
> >>
> >>I'm glad that we agree about the benefits of signed receipts.  You do not 
> >>include sufficient detail in your MIME receipt description for me to really 
> >>comment, but it is very important to include cryptographic binding between 
> >>the original message and the receipt.  Non-repudiation with proof of 
> >>delivery cannot be provided without such a binding.
> >
> >It was not intended as a proposal, merely a comment that it could be 
> >done. Isn't there an IETF working group for these kinds of extensions?
> 
> I do not know of such a group.  At the IETF in LA, there will be a BOF on 
> Tuesday evening (the last night time slot) to discuss the MSP MIME 
> encapsulation technique.  As I said in a previous message, I will post the 
> Internet-Draft soon.  It will also be available in the usual places that 
> Internet-Drafts are posted.
> 
> Russ
> 

=====================================================================
Donald E. Eastlake 3rd     +1 508-287-4877(tel)     dee@cybercash.com
   318 Acton Street        +1 508-371-7148(fax)     dee@world.std.com
Carlisle, MA 01741 USA     +1 703-620-4200(main office, Reston, VA)
http://www.cybercash.com           http://www.eff.org/blueribbon.html