Re: Pervasive encryption: Pro and contra

Henry,

I�m sure that�s interesting work, but it�s off-topic for this list. 

Thanks,


On 18 Nov 2013, at 8:10 pm, Henry Story <henry.story@bblfish.net> wrote:

> Hi Tim,  hi all. 
> 
>    Since my days at Sun Microsystems working with Tim Bray I have been developing with 
> a loose knit distributed community a set of standards based tools that show how one can
> answer a lot of the negatives put forward here in order to build a more secure web with
> pervasive TLS based encryption. The idea is to use tools and standards that exist off
> the shelf. 
> 
>    The answer is to distribute data to the nodes, so that each person/organisation physically
> controlls its own information on its servers. This requires distributed authentication and
> distributed access control. It requires ease of use. All of that can in fact be achieved in
> my opinion.
> 
>   I can explain this here. But most of you will find something annoying about it.
> Tim will be skeptical because we use RDF. Others will be skeptical because we
> use client side TLS certificiates for identification without using CAs to sign them, 
> ....  I think the pain point makes it worth trying something new.
> 
>   you can check the list of specs we use
>    https://dvcs.w3.org/hg/WebID/raw-file/tip/spec/index.html
> 
>   But of course that won't help that much. You have to see it in action to see it 
> working. 
> 
>    If some of you are in Paris next week we'll be having a Workship at the Mozilla labs
> in Paris to show how that works.
>    https://github.com/stample/wiki/wiki/Weave-the-web-we-want
> 
>   if you can't read the doc, then check out the project README to get an idea 
> of how this works ( with curl: you'll need to imagine it doing the same with JS )
>    https://github.com/stample/rww-play
> 
> Henry
> 
> 
> On 17 Nov 2013, at 02:03, Tim Bray <tbray@textuality.com> wrote:
> 
>> There has been a *whole lot* of traffic on this subject.  It�s fascinating that the meeting of minds is so difficult, and any possibility of that happening is made more difficult by the discussion skewing back and forth across the road.
>> 
>> To help sort things out in my own mind, I just went and read the last few hundred messages and attempted to curate the pervasive/mandatory encryption arguments, pro and contra.  It�s in a Google doc that�s open to comment by anyone: http://goo.gl/6yhpC1  Hm, is there a handy wiki platform somewhere that can stand up to the pressure?
>> 
>> I don�t know if trying to organize the talking points is generally useful, but I sure found it personally useful; maybe others will too.
>> 
>> Disclosure: I remain pretty strongly in favor of as much mandatory encryption as we can get, so that may have filtered my expression of the issues.  I've version-stamped this: 2013/11/16, and promise not to change it in case people comment on it.
> 
> Social Web Architect
> http://bblfish.net/
> 

--
Mark Nottingham   http://www.mnot.net/

Received on Monday, 18 November 2013 09:17:27 UTC