Re: [homenet] routing protocol comparison document and hncp

Gert Doering <gert@space.net> Tue, 03 March 2015 16:43 UTC

Return-Path: <gert@Space.Net>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE4E61A01FC for <homenet@ietfa.amsl.com>; Tue, 3 Mar 2015 08:43:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.61
X-Spam-Level:
X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M_KlEI9-7YCA for <homenet@ietfa.amsl.com>; Tue, 3 Mar 2015 08:43:47 -0800 (PST)
Received: from mobil.space.net (mobil.space.net [195.30.115.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A17A71A9239 for <homenet@ietf.org>; Tue, 3 Mar 2015 08:43:47 -0800 (PST)
X-Original-To: homenet@ietf.org
Received: from mobil.space.net (localhost [IPv6:::1]) by mobil.space.net (Postfix) with ESMTP id E562C60934 for <homenet@ietf.org>; Tue, 3 Mar 2015 17:43:45 +0100 (CET)
X-SpaceNet-Relay: true
Received: from moebius3.space.net (moebius3.Space.Net [IPv6:2001:608:2:2::250]) by mobil.space.net (Postfix) with ESMTPS id ABDAD6029D for <homenet@ietf.org>; Tue, 3 Mar 2015 17:43:45 +0100 (CET)
Received: (qmail 23619 invoked by uid 1007); 3 Mar 2015 17:43:45 +0100
Date: Tue, 03 Mar 2015 17:43:45 +0100
From: Gert Doering <gert@space.net>
To: Michael Thomas <mike@mtcc.com>
Message-ID: <20150303164345.GL98668@Space.Net>
References: <alpine.DEB.2.02.1503021452000.20507@uplift.swm.pp.se> <A782D466-C3D2-497F-A5C1-6ABD0CDBFB71@iki.fi> <3AA7118E69D7CD4BA3ECD5716BAF28DF22EE1EF9@xmb-rcd-x14.cisco.com> <54F4BC43.1090903@mtcc.com> <54F4BFE6.7020105@gmail.com> <54F4C43D.2020206@mtcc.com> <54F4D43E.1040508@gmail.com> <54F51706.7010103@mtcc.com> <2749579B-4D7F-4B0F-9ABC-8B15A81F713D@orandom.net> <54F5D3EC.2080307@mtcc.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <54F5D3EC.2080307@mtcc.com>
X-NCC-RegID: de.space
User-Agent: Mutt/1.5.23 (2014-03-12)
Archived-At: <http://mailarchive.ietf.org/arch/msg/homenet/XlnUGCY9HseyeI7qQUtUOUsyL7Q>
Cc: homenet@ietf.org
Subject: Re: [homenet] routing protocol comparison document and hncp
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2015 16:43:49 -0000

Hi,

On Tue, Mar 03, 2015 at 07:31:56AM -0800, Michael Thomas wrote:
> Considering that provisioning personal certificates is the almost the 
> polar opposite of zeroconf, the chances
> of the normal schlub seeing an informative and/or trustworthy name are 
> really, really low.

You might want to entertain you reading 
 
  draft-behringer-homenet-trust-bootstrap

which gives a good idea how this could work (the general ideas, maybe not
the specific implementation).

Of course the normal end user is not going to ever look at or manually
generate a certificate.

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444           USt-IdNr.: DE813185279