[Anima] Brian/anima: trust notion of ASA communications

[Toerless Eckert <[e-mail]>]

Hi Brian, 

sorry to pick you out, but i think you've got the best overview of
the ongoing set of ASA related docs.

I just got reminded through ongoing ACP spec review about something that
would be good to write into the appropriate ASA spec, but not sure which
one:

One of the fundamental problems we have to solve longer term is how we
can establish better than "Any ANI peer is equally trusted" notion.

Short term, i'll propose when i have time to have according roles in
the ANI certificates, but thats really a non-autonomic solution because
some outside intelligence (operator) has to assign such a role.

In reality today, its family,friends,colleagues&media that establish
the trust notion for us: trust foo.com to provide service bar, but
certainly not acme.com. The fact that you can then cryptographically
(web-Cert) assert that you're really talking to foo.com is really just
a secondary dependency.

I think DINRG is working in this direction, but have failed to track.
Maybe there is a way to collaborate on this, aka: see if/when they might
have output we could think to adopt/leverae.

But its fundamental if we want to move into more autonomic solutions
beyond just supporting the current SDN model.

Right now we expect objective announcements from any node to be equally
trustworthy and decide on selecting one only on announced parameters
(also subject to equal trust) and network parameter comparison.
And of course, this goes beyond trust into performance vetting by
others and so on.

Trying to figure out the most easy use-case would also be quite
helpfull. aka: what the most short term useful ASA that we'd like to
have spread around the network, where we could apply different degrees
of these mechanisms...

Cheers
    Toerless