[saag] Re: Proposal for Discussion: The Secure Internet – Embedding Trust into the Protocol Layer

Hi all,

It turns out we have to consider various things beyond using I-D format here. It will take us some time.

We’ll update you in due time. Thanks.

Cheers

Thi Nguyen-Huu | CEO

Tel: +1 905.502.7000 x 3288  |  Toll Free: 888.879.5879
[email protected]<mailto:[email protected]> |  www.winmagic.com<http://www.winmagic.com/>

WinMagic Corp. | 11-80 Galaxy Blvd.
Toronto, ON  |  M9W 4Y8 |  Canada | www.winmagic.com<http://www.winmagic.com/>
[cid:[email protected]]<http://www.facebook.com/WinMagicInc>  [cid:[email protected]] <https://twitter.com/winmagic>   [cid:[email protected]] <http://www.linkedin.com/company/winmagic>   [cid:[email protected]] <https://www.winmagic.com/blog/>
[A person holding a phone and typing on a computer  AI-generated content may be incorrect.]<https://winmagic.com/en/secure_internet/>

From: Liuchunchi(Peter) <[email protected]>
Sent: Sunday, August 24, 2025 9:33 PM
To: Thi Nguyen-Huu <[email protected]>; Eric Rescorla <[email protected]>; [email protected]
Cc: [email protected]; Sergei Nikitin <[email protected]>
Subject: RE: [saag] Re: Proposal for Discussion: The Secure Internet – Embedding Trust into the Protocol Layer

You don't often get email from [email protected]<mailto:[email protected]>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
CAUTION:This email originated from outside of the organization. Do not click links, open attachments or respond unless you recognize the sender and know that the content is safe.

Agreeing with Salz from a different thread – the best way to help saag understand might be writing an I-D and present it in the next IETF (dispatch). Here’s some useful links : https://authors.ietf.org/  https://ietf.github.io/id-guidelines/

Looking forward to it :)
Peter

From: Thi Nguyen-Huu <[email protected]<mailto:[email protected]>>
Sent: Friday, August 22, 2025 6:50 PM
To: Liuchunchi(Peter) <[email protected]<mailto:[email protected]>>; Eric Rescorla <[email protected]<mailto:[email protected]>>; [email protected]<mailto:[email protected]>
Cc: [email protected]<mailto:[email protected]>; Sergei Nikitin <[email protected]<mailto:[email protected]>>
Subject: RE: [saag] Re: Proposal for Discussion: The Secure Internet – Embedding Trust into the Protocol Layer

Thanks for your email, Peter. I appreciate it.

I included some use cases in the letter to iesg. But maybe they were dismissed because I was not a member of any IETF groups…

Some of the members have helped us and thus in the meantime I am a subscriber to SAAG, and we are working on I-D which should be compliant with IETF. Once ready the documents will be sent to appropriate groups I guess.

I didn’t know, and just looked at KEYTRANS. I don’t think what we propose overlap with it. Rather, KEYTRANS will help. Among others KEYTRANS seems to allow certificate-less methods, at least for client side? While not required, a supplementary part of our proposals promotes certificate-less usage…

We might talk soon? Thanks.

Cheers

Thi Nguyen-Huu | CEO

Tel: +1 905.502.7000 x 3288  |  Toll Free: 888.879.5879
[email protected]<mailto:[email protected]> |  www.winmagic.com<http://www.winmagic.com/>

WinMagic Corp. | 11-80 Galaxy Blvd.
Toronto, ON  |  M9W 4Y8 |  Canada | www.winmagic.com<http://www.winmagic.com/>
[cid:[email protected]]<http://www.facebook.com/WinMagicInc>  [cid:[email protected]] <https://twitter.com/winmagic>   [cid:[email protected]] <http://www.linkedin.com/company/winmagic>   [cid:[email protected]] <https://www.winmagic.com/blog/>
[A person holding a phone and typing on a computer  AI-generated content may be incorrect.]<https://winmagic.com/en/secure_internet/>

From: Liuchunchi(Peter) <[email protected]<mailto:[email protected]>>
Sent: Friday, August 22, 2025 3:04 AM
To: Thi Nguyen-Huu <[email protected]<mailto:[email protected]>>; Eric Rescorla <[email protected]<mailto:[email protected]>>; [email protected]<mailto:[email protected]>
Cc: [email protected]<mailto:[email protected]>; Sergei Nikitin <[email protected]<mailto:[email protected]>>
Subject: RE: [saag] Re: Proposal for Discussion: The Secure Internet – Embedding Trust into the Protocol Layer

You don't often get email from [email protected]<mailto:[email protected]>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
CAUTION:This email originated from outside of the organization. Do not click links, open attachments or respond unless you recognize the sender and know that the content is safe.

>>SI proposes a new trust model for the Internet — one that replaces static credentials and certificate-based authentication with policy-bound cryptographic keys anchored in hardware,

Can we solve this problem using key attestation + PKI?
Can you be more specific with the specific use case and technical gap that calls for this new technology?
This may help saag understand the problem better.

Also have you been looking at KEYTRANS working group? They aim to provide verifiable identity-to-public-key bindings<https://datatracker.ietf.org/wg/keytrans/about/>.

Peter
…. Cut……

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]