[TLS] Re: Response to CoI Complaints

Hi Panos,

Doesn't at least one of Amazon's TLS libraries counter the exact class 
of technical concerns raised in this and related threads?

Shouldn't TLS as a protocol follow that lead? I would support it.

On 7/16/26 22:34, Kampanakis, Panos wrote:
> +1 for Deb. The criticism is unfounded, unfair, and conspiracy-
> theoretical, it must stop.
There is little that is conspiracy-theoretical here but if you see 
something, be specific please. Most of what has been raised, especially 
with citations provided, is well established factually. There are 
Corporate Partners, and lifetime obligations.

The majority of the questions presented to Deb in her role as a person 
in IETF leadership are well founded. The discussions are uncomfortable 
at times but almost everyone is trying to keep it professional.

Evading direct questions that the leadership should be able to easily 
answer is making that worse. Most of the questions and phrasing are 
seeking understanding where in the end everyone can evaluate the matter 
for themselves.

For clarity, do you work directly with the (former NSA) co-author of 
Extended Random in the Amazon AWS cryptography group or are you in a 
different department?

If so: I would encourage you to have a conversation with them about the 
purpose of Extended Random and also about NSA's involvement in the IETF 
as part of PROJECT BULLRUN. Probably some of the other NSA alumni in the 
Amazon crypto team know various aspects but the former NSA leadership 
would know best.

I am fairly certain that if there is no problem then they will directly 
answer you. That could actually help here because then you could return 
here to help us settle the matter with your newly found insight. Unless 
you aren't interested or, for example, a life time obligation prevents 
such conversations. They are all extremely smart people and while we 
obviously have some policy disagreements, we can be respectful while not 
bowing our heads or accepting deflections from the issues that are part 
of the IETF's mission.

There are probably other reasons that this is such a challenge. Making 
this about a single person is missing the point. No one has a personal 
problem with Deb as far as I can tell. I would even go so far as to say 
that we have reached rough consensus on at least one thing here: Deb's 
character is great and not at all in question.

Kind regards,
Jacob Appelbaum

_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]