Re: Fwd: [Nea] Re: use of a design team to develop requirements

["Mike Fratto" <mfratto at gmail.com>]

On 12/13/06, Keith Moore <moore at cs.utk.edu> wrote:
> >  In fact, I am completely
> > convinced that the threat that NEA, or any NAC framework, will be used
> > for open ended queries is groundless.
>
> since the NEA protocol does not exist yet, and there has been pushback
> against trying to impose requirements on the NEA protocol that would
> prevent it from being used for open ended queries, I fail to understand
> the source of your conviction.

If the protocol can be designed that prevents open ended queries while
still allowing queries, then I think doing so probably makes a cleaner
protocol and any mitigation to the claimed privacy threat is a
side-effect.

> do you believe there's really interest in designing NEA in such a way
> that it can't be used for open ended queries?  or do you just believe
> that it won't get used that way even if it's possible to use it that way?

I believe there is interest in the working group to design a robust
protocol. That may mean a protocol that can't be used for open-ended
queries.

Any protocol could be used for nefarious purposes. I don't think that
there is need for alarm that the work of the NEA will be abused any
more than any other protocol.

_______________________________________________
Nea mailing list
Nea at ietf.org
https://www1.ietf.org/mailman/listinfo/nea