Re: [homenet] Ted's security talk at IETF99: DNCP Security

Ted Lemon <mellon@fugue.com> Tue, 01 August 2017 15:56 UTC

Return-Path: <mellon@fugue.com>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A314312EC1D for <homenet@ietfa.amsl.com>; Tue, 1 Aug 2017 08:56:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=fugue-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pTiM1tH0kVho for <homenet@ietfa.amsl.com>; Tue, 1 Aug 2017 08:56:36 -0700 (PDT)
Received: from mail-qk0-x234.google.com (mail-qk0-x234.google.com [IPv6:2607:f8b0:400d:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28A4412EACC for <homenet@ietf.org>; Tue, 1 Aug 2017 08:56:36 -0700 (PDT)
Received: by mail-qk0-x234.google.com with SMTP id d145so11665320qkc.2 for <homenet@ietf.org>; Tue, 01 Aug 2017 08:56:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fugue-com.20150623.gappssmtp.com; s=20150623; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ooUxhAQDR7aIHsMB4B4oCW8stj8X/ofunJnbC6841ZQ=; b=GgIcw6OWzq9PMLiFmGSBsD/YOHzlSPlMsd1Cb8aRsyCrXGXmsiNiZTbrOmt5Dcgw+Z VUC6dWep6m0BeYZHa1VIpLTC4UGXAPDZBf8763WRLChyAtYUtEiM1o7xUS58bC5XaNNL 3FJSJ1Z3Y12idVJreG8dXYgLl9XDqIPBZo0hLjIvS3j16Mmzdh23HIz9Zsn7xn5F6T6I cqOUOaIr4XW9m3+x/jyErqQJojD3SJFrQPwRfPMIY1hDHWyjJfa7R5BJW0B64miEgr4t m5WKmTGxCQHMhJ4ok1PDADovQhVM8Q3zr9l234iU3vpZViLoajn+tMJUgP0dnoD8Wkqd E5tA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ooUxhAQDR7aIHsMB4B4oCW8stj8X/ofunJnbC6841ZQ=; b=OqGiFF72Sgd5gZ7Tn7z9yODRD4gcTBNZqn0B0NqYP6XVJiiAXZ0lLAaGICoP1b9kCu frJLQ636I8R8CPgaRqSNG5L/5fUdTslxWMZJwR7hVEkKKs/ZvapjlWUCG4yYi4RyKKZM d7W66IY5N6t7XNfcGj+4H0Og/mk6IbWtvza66GrGrqeW0vyZjzHpRaYhG6Ff1GnicJKJ VTgD7yJL/cJzCeJHFyYNQ30PhykNP48bkGS5mhStmvXI1TM/Q4vfHddpW4s/NDXl6y1Y mH8QDLio9Rh4KXR3gd+X4nP315I49AYZ2MNHLQFOB8uFvHgJGwpPca2yGhwjk2ALIWBK pAFQ==
X-Gm-Message-State: AIVw113/IlvignZatB/DogLG6YEijc2JiW2Sr/m1sfkxmAGtJKfptMis WP06f1OKihjE/7TJ4Gc2kw==
X-Received: by 10.55.27.145 with SMTP id m17mr27521800qkh.298.1501602995258; Tue, 01 Aug 2017 08:56:35 -0700 (PDT)
Received: from [10.0.30.153] (c-73-167-64-188.hsd1.ma.comcast.net. [73.167.64.188]) by smtp.gmail.com with ESMTPSA id i18sm25652410qkh.18.2017.08.01.08.56.34 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 01 Aug 2017 08:56:34 -0700 (PDT)
From: Ted Lemon <mellon@fugue.com>
Message-Id: <6C42A593-3EBC-49BE-9A9F-0CF701FF68BF@fugue.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_7C9A0505-1F4F-4B90-A56B-11AFF3356FF8"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Tue, 01 Aug 2017 11:56:33 -0400
In-Reply-To: <10182.1501601902@obiwan.sandelman.ca>
Cc: homenet@ietf.org
To: Michael Richardson <mcr+ietf@sandelman.ca>
References: <3725.1501514462@obiwan.sandelman.ca> <52E1C5A0-FC0E-46A5-9016-AA95FB3DC1CB@fugue.com> <3184.1501522914@obiwan.sandelman.ca> <5A407EA3-AC8B-44A7-8EC2-8242480027FE@fugue.com> <27345.1501546823@obiwan.sandelman.ca> <AA5A4081-02A3-4A80-BF8B-10C003DE71D5@fugue.com> <10182.1501601902@obiwan.sandelman.ca>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/j3lyKbgXwYBSnu3D8gQ_PEcJwng>
Subject: Re: [homenet] Ted's security talk at IETF99: DNCP Security
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Aug 2017 15:56:38 -0000

On Aug 1, 2017, at 11:38 AM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> You agree that it's a different problem right?
> 
> The common part is that one might have a similar set of external (physical) signals.
> 
> Should Dave bring his printer to the IETF network, and they happen to
> discovery each other via privacy-enhanced dnssd magic (cf: Arthur Clark's
> definition of magic), then it would be good that they can prove that it's really them.

To be honest, I probably missed the point you were making—I just went back and reviewed this exchange, and I don't actually understand what the distinction is that you are making between ephemeral and long-lived relationships.