[saag] Re: [EXT] Interests on Initiating the standardiza tion work related to "Zero Trust"?

Hi Benfeng, Aijun and others involved in this effort,

I have an offer for you:

  * I am proposing a research group (not working group) to tackle the
    research questions around confidential computing [0]. After the side
    meeting, I met IRTF chair in Montreal and explained the idea. He
    seemed interested in the idea. We need to provide charter for
    further discussion. I plan to initiate this work in early Feb.
  * Michael P wants to do some practical cybersecurity and he is quite
    open to ideas [1].

It seems to me what you want to do has some overlaps. Would it make 
sense to join all forces and define a scope for a research group which 
covers all of that? Once the research group is formed and some 
foundational work is done in that research group, we can propose 
one/more very specific working groups. Thoughts?

Also a couple of notes inline:


On 08.01.26 06:45, Benfeng Chen wrote:
> I’m not comparing Noise with TLS here, as that isn’t the focus of the 
> discussion.
Nor was I. I was just expressing my doubts on the accuracy and recency 
of information there.
>
>
>     Both WhatsApp and NHP initially chose the Noise protocol because
>     it was considered secure and fast for their respective threat
>     models. Meta’s later transition to attested TLS was driven by
>     deployment and integration requirements for confidential
>     computing, not by any identified weakness in Noise itself.
>
Well, not being quantum safe is itself a weakness of Noise, while TLS WG 
offers quantum-safe solutions. Google folks (Tiziano Santoro and his 
colleagues) told me at Linux Plumbers Conference in Tokyo that they will 
most likely not be pursuing efforts on attested Noise for this reason.

-Usama


[0] 
https://mailarchive.ietf.org/arch/msg/124attendees/Z7fg3_OAW4lJtgrU68oZLFdCLxw/

[1] 
https://mailarchive.ietf.org/arch/msg/practical-cybersecurity/1jZfkhUQem9ru7oSvR5noWujQ44/

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]