[Coin] A few notes on draft-kunze-coinrg-transport-issues

["Diego R. Lopez" <[e-mail]>]

Hi,

This message is a continuation of the brief comments I made at the COINRG meeting in Singapore, regarding the security aspects (and a few others) you pointed in your presentation. Let me go into a bit more of detail on some results that I think could be useful, and include Ivan Vidal in the loop, who has been working with us in most of the matters mentioned below, and can help in analyzing possible applications to the transport issues in the draft.

  *   PoT (proof-of-transit) is a technique being standardized in the SFC WG within IETF that I think can address some of the points you made when talking about authentication. See draft-ietf-sfc-proof-of-transit. BTW, the order-verifiable version of the PoT approach was recently demonstrated using a QKD deployment on commercial fiber infrastructure. Quantum crypto is not so far away…
  *   There has been some work in multi-context security (mcTLS, mbTLS or ACCE-AP are the most salient approaches I am aware of) and I think could be applicable for addressing the encryption issue. This work was originally motivated by the goal of retaining manageability in an environment with default E2E encryption at the transport layer, and mostly focused on web browsing, and the obvious privacy issues have limited their applicability to enterprise environments. But other, more recent work has been focused on more lightweight approaches to multi-context that I think could be applicable here, in particular the SCoT approach (the reference paper on this proposal is titled “SCoT: A secure content-oriented transport”)
  *   When it comes to retransmissions and path enhancements, I’d suggest to have a look to the LOOPS proposal and, in particular, to some work (led by Ivan) we have been recently making on transparent interconnection of virtualized network functions. I have no reference to this, but we’d be happy to discuss it if there is interest in it.

Be goode,
--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
https://www.linkedin.com/in/dr2lopez/

e-mail: [e-mail]<mailto:[e-mail]>
Tel:         [phone]
Mobile:  [phone]
----------------------------------

________________________________

Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.

The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição