Re: [Trans] Threat model outline, attack model

Matt Palmer <mpalmer@hezmatt.org> Sun, 28 September 2014 22:35 UTC

Date: Mon, 29 Sep 2014 08:35:29 +1000
From: Matt Palmer <mpalmer@hezmatt.org>
To: trans@ietf.org
Message-ID: <20140928223529.GB28050@hezmatt.org>
References: <54242F8A.2080602@bbn.com> <CABrd9SSwAdv-mAgofNT6bMWky7q=bZhAaX=L4gZUQDkROQ-3ZA@mail.gmail.com> <54258AF0.7090602@bbn.com> <4842B04F-A058-4F3C-9DA3-F29735EC7570@taoeffect.com> <alpine.LFD.2.10.1409262236210.27616@bofh.nohats.ca> <FC4A18E2-A42C-472F-B9FE-2278BB5A0BBA@taoeffect.com> <CABrd9SQBuQO1wrv7s06aT-GGyeWmu2sFzJrH6a+t81aq-dei+w@mail.gmail.com> <77D4B290-D2C8-44D7-AF84-A0A1B91B9557@taoeffect.com> <20140927211940.GP28050@hezmatt.org> <CF7C1E45-159E-41AF-A1A8-C8CC8D28088C@kinostudios.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <CF7C1E45-159E-41AF-A1A8-C8CC8D28088C@kinostudios.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Archived-At: http://mailarchive.ietf.org/arch/msg/trans/6CDAInv-DJEE4LB757ZucOIg4KQ
Subject: Re: [Trans] Threat model outline, attack model
Precedence: list

On Sat, Sep 27, 2014 at 02:40:59PM -0700, Greg wrote:
> On Sep 27, 2014, at 2:19 PM, Matt Palmer <mpalmer@hezmatt.org> wrote:
> 
> > On Sat, Sep 27, 2014 at 09:58:56AM -0700, Tao Effect wrote:
> >> "No barrier"? Subjects (domain owners) would need to monitor *all* the logs out there.
> >> 
> >> There will be like 1000+ logs out there.
> > 
> > "Citation needed", as the Wikipedeans say.  I'm not sure how you could
> > possibly come to that conclusion.
> 
> I am citing your own documentation:

I had nothing to do with the content on that webpage.  Not everyone
interested in CT works for Google, y'know.

> "we think “every major CA” is within limits of feasibility"
> 
> http://www.certificate-transparency.org/faq

> And using Jacob's numbers from here:
> 
> http://www.ietf.org/mail-archive/web/therightkey/current/msg00745.html

The word "major" does not appear anywhere in the content of that resource. 
Thus, you're comparing apples with oranges -- the Google CT FAQ suggests
that "every major CA" may run a log, while your resource says there may be
between "more than 1200" and 1832 CA certificates (total, comprising both
roots and intermediates) in active existence, but with no indication of how
many of those may be considered "major".

- Matt

-- 
The New York Times: the paper that asks for more verification from its
readers than its writers.

[Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Katriel Cohn-Gordon
[Trans] Fwd: Threat model outline, attack model Melinda Shore
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Dmitry Belyavsky
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Dmitry Belyavsky
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Dmitry Belyavsky
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Paul Wouters
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Matt Palmer
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Ralph Holz
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Matt Palmer
Re: [Trans] Threat model outline, attack model Greg
Re: [Trans] Threat model outline, attack model Gervase Markham
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Ralph Holz
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model David Leon Gil
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Stephen Kent