Re: Machine Identity

Miika Komu <miika@iki.fi> Thu, 28 February 2008 16:54 UTC

Return-Path: <discuss-bounces@ietf.org>
X-Original-To: ietfarch-discuss-archive@core3.amsl.com
Delivered-To: ietfarch-discuss-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DCC7228C96C; Thu, 28 Feb 2008 08:54:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.713
X-Spam-Level:
X-Spam-Status: No, score=-4.713 tagged_above=-999 required=5 tests=[AWL=1.886, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MpcqgqV-80gJ; Thu, 28 Feb 2008 08:54:20 -0800 (PST)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7F3E53A6C03; Thu, 28 Feb 2008 08:54:09 -0800 (PST)
X-Original-To: discuss@core3.amsl.com
Delivered-To: discuss@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E32A528C965 for <discuss@core3.amsl.com>; Thu, 28 Feb 2008 08:54:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NM2h0NM0+OYI for <discuss@core3.amsl.com>; Thu, 28 Feb 2008 08:54:02 -0800 (PST)
Received: from twilight.cs.hut.fi (twilight.cs.hut.fi [130.233.40.5]) by core3.amsl.com (Postfix) with ESMTP id 4F69728C8BB for <discuss@apps.ietf.org>; Thu, 28 Feb 2008 08:53:34 -0800 (PST)
Received: by twilight.cs.hut.fi (Postfix, from userid 60001) id 84CE12E3B; Thu, 28 Feb 2008 18:53:26 +0200 (EET)
X-Spam-Niksula: No
Received: from kekkonen (kekkonen.cs.hut.fi [130.233.41.50]) by twilight.cs.hut.fi (Postfix) with ESMTP id 4831E2E4E; Thu, 28 Feb 2008 18:53:22 +0200 (EET)
Date: Thu, 28 Feb 2008 18:53:22 +0200 (EET)
From: Miika Komu <miika@iki.fi>
X-X-Sender: mkomu@kekkonen.cs.hut.fi
To: Stephane Bortzmeyer <bortzmeyer@nic.fr>
Subject: Re: Machine Identity
In-Reply-To: <20080228162304.GB21463@nic.fr>
Message-ID: <Pine.SOL.4.64.0802281831420.17320@kekkonen.cs.hut.fi>
References: <20080226130527.GA1404@generic-nic.net> <47C4101B.6050206@spaghetti.zurich.ibm.com> <20080226142754.GA12093@nic.fr> <Pine.SOL.4.64.0802270013060.16365@kekkonen.cs.hut.fi> <20080228162304.GB21463@nic.fr>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: discuss@apps.ietf.org
X-BeenThere: discuss@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: general discussion of application-layer protocols <discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/discuss>, <mailto:discuss-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:discuss@ietf.org>
List-Help: <mailto:discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/discuss>, <mailto:discuss-request@ietf.org?subject=subscribe>
Sender: discuss-bounces@ietf.org
Errors-To: discuss-bounces@ietf.org

On Thu, 28 Feb 2008, Stephane Bortzmeyer wrote:

> On Wed, Feb 27, 2008 at 12:28:40AM +0200,
> Miika Komu <miika@iki.fi>; wrote
> a message of 39 lines which said:
>
>> While waiting for changes to libc, the DNS interaction can be
>> accomplished by running a DNS proxy in the localhost that can do the
>> HIP magic.
>
> Hold on, I did not want to actually use the HIP protocol. I was just
> thinking aloud about wether it was possible to use Host Identities in
> an ordinary application (regardless of wether HIP was running or not).

A research proposal called "Unmanaged Internet Protocol" does something 
like this:

http://www.pdos.lcs.mit.edu/papers/uia:osdi06.pdf

The "personal identitities" of UIA are really just an extension of Host 
Identities as experiments in another previous year publication indicate:

http://www.iki.fi/miika/docs/f17-komu.pdf

> For instance, suppose we were redesigning SSH from scratch, would it
> be possible / would it make sense to use Host Identities instead of
> SSH-specific keys?

IMHO yes.

-- 
Miika Komu                                       http://www.iki.fi/miika/