Main Page - Revision history

Cadzow at 10:42, 26 July 2024

2024-07-26T10:42:28Z

← Older revision		Revision as of 11:42, 26 July 2024
Line 49:		Line 49:
	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

	The ETI problem has looked at the Going Dark phenonom in which there is a concern that the inability of a normally authorized party such as the network management entity to function because of the encryption by end-point users or third parties. For example, the intersection of the two elements, A, representing network capabilities that, when content and headers are encrypted, pose extreme challenges to network operation, and B, representing Network capabilities that are core to the development of cyber/digital business, should be minimized, whilst always seeking to eliminate A, and further complicated by ensuring that the obligations placed on operators and suppliers with respect to regulation, law or convention, or operator security policy, are fulfilled (element C in the figure). The result is that whilst maximising the benefit of encryption as above it is also essential to maximise the viability of the service, and the ability to meet obligations set by 3rd parties. [[File:GoingDark-3.png\|500px]]		The ETI problem has looked at the Going Dark phenonom in which there is a concern that the inability of a normally authorized party such as the network management entity to function because of the encryption by end-point users or third parties. For example, the intersection of the two elements, A, representing network capabilities that, when content and headers are encrypted, pose extreme challenges to network operation, and B, representing Network capabilities that are core to the development of cyber/digital business, should be minimized, whilst always seeking to eliminate A, and further complicated by ensuring that the obligations placed on operators and suppliers with respect to regulation, law or convention, or operator security policy, are fulfilled (element C in the figure). The result is that whilst maximising the benefit of encryption as above it is also essential to maximise the viability of the service, and the ability to meet obligations set by 3rd parties.

			<div align="center">[[File:GoingDark-3.png\|500px]]</div>

	The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.		The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.

Cadzow at 11:58, 25 July 2024

2024-07-25T11:58:39Z

← Older revision		Revision as of 12:58, 25 July 2024
Line 49:		Line 49:
	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

	The ETI problem has looked at the Going Dark phenonom in which there is a concern that the inability of a normally authorized party such as the network management entity to function because of the encryption by end-point users or third parties. For example, the intersection of the two elements, A, representing network capabilities that, when content and headers are encrypted, pose extreme challenges to network operation, and B, representing Network capabilities that are core to the development of cyber/digital business, should be minimized, whilst always seeking to eliminate A, and further complicated by ensuring that the obligations placed on operators and suppliers with respect to regulation, law or convention, or operator security policy, are fulfilled (element C in the figure)~~[[File:GoingDark-3.png\|500px]]~~. The result is that whilst maximising the benefit of encryption as above it is also essential to maximise the viability of the service, and the ability to meet obligations set by 3rd parties.		The ETI problem has looked at the Going Dark phenonom in which there is a concern that the inability of a normally authorized party such as the network management entity to function because of the encryption by end-point users or third parties. For example, the intersection of the two elements, A, representing network capabilities that, when content and headers are encrypted, pose extreme challenges to network operation, and B, representing Network capabilities that are core to the development of cyber/digital business, should be minimized, whilst always seeking to eliminate A, and further complicated by ensuring that the obligations placed on operators and suppliers with respect to regulation, law or convention, or operator security policy, are fulfilled (element C in the figure). The result is that whilst maximising the benefit of encryption as above it is also essential to maximise the viability of the service, and the ability to meet obligations set by 3rd parties. [[File:GoingDark-3.png\|500px]]


	The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.		The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.

Cadzow at 11:57, 25 July 2024

2024-07-25T11:57:46Z

← Older revision		Revision as of 12:57, 25 July 2024
Line 49:		Line 49:
	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

	[[File:GoingDark-3.png\|500px]]		The ETI problem has looked at the Going Dark phenonom in which there is a concern that the inability of a normally authorized party such as the network management entity to function because of the encryption by end-point users or third parties. For example, the intersection of the two elements, A, representing network capabilities that, when content and headers are encrypted, pose extreme challenges to network operation, and B, representing Network capabilities that are core to the development of cyber/digital business, should be minimized, whilst always seeking to eliminate A, and further complicated by ensuring that the obligations placed on operators and suppliers with respect to regulation, law or convention, or operator security policy, are fulfilled (element C in the figure)[[File:GoingDark-3.png\|500px]]. The result is that whilst maximising the benefit of encryption as above it is also essential to maximise the viability of the service, and the ability to meet obligations set by 3rd parties.


	The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.		The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.

Cadzow at 11:52, 25 July 2024

2024-07-25T11:52:12Z

← Older revision		Revision as of 12:52, 25 July 2024
Line 49:		Line 49:
	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

	[[File:GoingDark-3.png\|~~200px~~]]		[[File:GoingDark-3.png\|500px]]

	The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.		The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.

Cadzow at 11:51, 25 July 2024

2024-07-25T11:51:32Z

← Older revision		Revision as of 12:51, 25 July 2024
Line 49:		Line 49:
	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

	[[File:GoingDark-3.png]]		[[File:GoingDark-3.png\|200px]]

	The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.		The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.

Cadzow at 11:48, 25 July 2024

2024-07-25T11:48:47Z

← Older revision		Revision as of 12:48, 25 July 2024
Line 48:		Line 48:

	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

			[[File:GoingDark-3.png]]

	The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.		The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.

Cadzow at 06:59, 25 July 2024

2024-07-25T06:59:14Z

← Older revision		Revision as of 07:59, 25 July 2024
Line 1:		Line 1:
	<center>		<center>
	<h1>Welcome to the ~~ISG~~ ETI (Encrypted Traffic Integration) Wiki ~~- soon to become ETSI TC CYBER WG ETI (I hope)~~</h1>		<h1>Welcome to the ETI (Encrypted Traffic Integration) Wiki</h1>
	</center>		</center>

Line 8:		Line 8:
	<td style="padding:10px">		<td style="padding:10px">
	<span style="font-size:14pt">		<span style="font-size:14pt">
	'''About ~~ISG~~ ETI'''		'''About ETSI's ETI TB'''
	</span>		</span>
	* '''[[~~ISG~~ ETI Activities]]''' Information about ~~ISG~~ ETI (high level overview, work program and deliverables).		* '''[[ETI Activities]]''' Information about ETI (high level overview, work program and deliverables).
	* '''[[~~ISG~~ ETI Planning]]''' Information about ~~ISG~~ ETI (planning on meetings and future information; warning this information may change).		* '''[[ETI Planning]]''' Information about ETI (planning on meetings and future information; warning this information may change).
	</td>		</td>
	<td style="padding:10px">		<td style="padding:10px">
Line 20:		Line 20:
	* '''[[Published work items]]''' Information about finalised ETI documents.		* '''[[Published work items]]''' Information about finalised ETI documents.

	* '''[[Core ETI Topics]]''' Information about core ~~ISG~~ ETI ~~Topics~~.		* '''[[Core ETI Topics]]''' Information about core topics addressed by ETI.

	* '''[https://portal.etsi.org/Portal_WI/form1.asp?tbid=888&SubTB=888&Param=gjMSGHNSPP6776epVe9&Alone=1 Current ETI work programme]''' Information about ~~ISG~~ ETI work in progress (open to members of ETSI and ISG ETI).		* '''[https://portal.etsi.org/Portal_WI/form1.asp?tbid=888&SubTB=888&Param=gjMSGHNSPP6776epVe9&Alone=1 Current ETI work programme]''' Information about ETI work in progress (open to members of ETSI and participants of ISG ETI).

	* '''[https://portal.etsi.org/Portal_TBofficials/form1.asp?tbid=888&SubTB=888&Alone=1 ETI leadership team]''' From the ETSI Portal.		* '''[https://portal.etsi.org/Portal_TBofficials/form1.asp?tbid=888&SubTB=888&Alone=1 ETI leadership team]''' From the ETSI Portal.
Line 30:		Line 30:
	'''FAQ:'''		'''FAQ:'''
	</span>		</span>
	* '''[[FAQ]]''' Frequently asked questions regarding ~~ISG~~ ETI (how to join, etc. ...).		* '''[[FAQ]]''' Frequently asked questions regarding ETI (how to join, etc. ...).
	</td>		</td>
	</tr>		</tr>
Line 47:		Line 47:
	* enhanced trust in the integrity of the information during transport.		* enhanced trust in the integrity of the information during transport.

	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or is dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or are dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

	The ETI problem is centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.		The ETI problem is therefore centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.
	<center>		<center>
	<h1>The ETI ecosystem</h1>		<h1>The ETI ecosystem</h1>
	</center>		</center>

	This part of the WiKi is a translation and reformatting of the ETSI ISG ETI report on the eco-system as it applies to the work area of the ~~ISG~~. In this respect the WiKi is intended as a living reference document for undertaking the responsibilities, areas of activity, organization and working methods enumerated in the Terms of Reference for Encrypted Traffic Integration ~~ISG~~. ETI is inherently diverse, dynamic, and spread across a complex array of bodies and activities worldwide, and constitutes a specialized ecosystem. The Group's effectiveness is predicated in large measure by constantly discovering, analysing, and understanding the diverse requirements and work occurring in this ecosystem in some kind of structured fashion. The present document should also be useful to the many constituents that are part of the encrypted traffic integration ecosystem.		This part of the WiKi is a translation and reformatting of the ETSI ISG ETI report on the eco-system as it applies to the work area of the group. In this respect the WiKi is intended as a living reference document for undertaking the responsibilities, areas of activity, organization and working methods enumerated in the Terms of Reference for Encrypted Traffic Integration. ETI is inherently diverse, dynamic, and spread across a complex array of bodies and activities worldwide, and constitutes a specialized ecosystem. The Group's effectiveness is predicated in large measure by constantly discovering, analysing, and understanding the diverse requirements and work occurring in this ecosystem in some kind of structured fashion. The present document should also be useful to the many constituents that are part of the encrypted traffic integration ecosystem.

	A broad summary of the problem and why there is a requirement to develop mitigations is given in the [https://www.etsi.org/deliver/etsi_gr/ETI/001_099/001/01.01.01_60/gr_ETI001v010101p.pdf ETI Problem Statement].		A broad summary of the problem and why there is a requirement to develop mitigations is given in the [https://www.etsi.org/deliver/etsi_gr/ETI/001_099/001/01.01.01_60/gr_ETI001v010101p.pdf ETI Problem Statement].
Line 82:		Line 82:

	This ecosystem changes constantly, so URIs provide links to the activities for the latest information.		This ecosystem changes constantly, so URIs provide links to the activities for the latest information.


	<center>		<center>
Line 88:		Line 87:
	</center>		</center>

	Quite a lot of the pages have had their placeholder lorem ipsum text replaced although there is still a lot remaining. As we increase the number of contributors this will change significantly (we ~~hope)~~.		Quite a lot of the pages have had their placeholder lorem ipsum text replaced although there is still a lot remaining. As we increase the number of contributors this will change significantly. The most signficant changes recently are the pages and text surrounding Zero Trust and in particular the ZT-Kipling method that we are developing.

	For a summary of the new publications in the field that we want to bring attention to we are citing certain Google Scholar results (other search engines will provide similar results).		For a summary of the new publications in the field that we want to bring attention to we are citing certain Google Scholar results (other search engines will provide similar results).

Cadzow at 06:52, 25 July 2024

2024-07-25T06:52:24Z

← Older revision		Revision as of 07:52, 25 July 2024
Line 1:		Line 1:
	<center>		<center>
	<h1>Welcome to the ISG ETI (Encrypted Traffic Integration) Wiki</h1>		<h1>Welcome to the ISG ETI (Encrypted Traffic Integration) Wiki - soon to become ETSI TC CYBER WG ETI (I hope)</h1>
	</center>		</center>

Line 49:		Line 49:
	However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or is dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.		However, encryption may have a negative impact on third parties who do not have access to the encryption keys used and therefore do not have access to the content, but may have operational or legal responsibilities that require or is dependent on some level of knowledge of the information transported. Critical factors include how the keys were generated, who has knowledge of them, and how are they protected or shared.

			The ETI problem is centred on the more existential threat of pervasive encryption. What this means is that networks can only ever achieve best effort as all the meta data they require (in signalling mainly) is not available to them to make routing decisions, or assist in the minimisation of delay and jitter. It also means losing the ability to protect users from unsolicited content, and that introduces concerns about liability in failing to protect users.
	<center>		<center>
	<h1>The ETI ecosystem</h1>		<h1>The ETI ecosystem</h1>

Cadzow at 10:48, 30 March 2022

2022-03-30T10:48:22Z

← Older revision		Revision as of 11:48, 30 March 2022
Line 93:		Line 93:

	[https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=middlebox+encryption&btnG=&oq=middlebox+e Middlebox encryption]		[https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=middlebox+encryption&btnG=&oq=middlebox+e Middlebox encryption]

	[https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=pervasive+encryption&btnG= Pervasive encryption]		[https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=pervasive+encryption&btnG= Pervasive encryption]

			The message here is that there is a lot of activity in the field and not all of it supportive of the wider aims of ETI.

Cadzow at 10:46, 30 March 2022

2022-03-30T10:46:00Z

← Older revision		Revision as of 11:46, 30 March 2022
Line 82:		Line 82:

	This ecosystem changes constantly, so URIs provide links to the activities for the latest information.		This ecosystem changes constantly, so URIs provide links to the activities for the latest information.


			<center>
			<h1>Summary of recent updates</h1>
			</center>

			Quite a lot of the pages have had their placeholder lorem ipsum text replaced although there is still a lot remaining. As we increase the number of contributors this will change significantly (we hope).

			For a summary of the new publications in the field that we want to bring attention to we are citing certain Google Scholar results (other search engines will provide similar results).

			[https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=middlebox+encryption&btnG=&oq=middlebox+e Middlebox encryption]
			[https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=pervasive+encryption&btnG= Pervasive encryption]