Re: Admission Control to the IETF 78 and IETF 79 Networks

"Richard L. Barnes" <rbarnes@bbn.com> Thu, 01 July 2010 15:52 UTC

Return-Path: <rbarnes@bbn.com>
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B22F23A69A3 for <ietf@core3.amsl.com>; Thu, 1 Jul 2010 08:52:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.492
X-Spam-Level:
X-Spam-Status: No, score=-0.492 tagged_above=-999 required=5 tests=[AWL=-0.493, BAYES_50=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XJ+z5WOek3kn for <ietf@core3.amsl.com>; Thu, 1 Jul 2010 08:52:22 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id 47BFC3A6895 for <ietf@ietf.org>; Thu, 1 Jul 2010 08:52:22 -0700 (PDT)
Received: from [192.1.255.188] (port=50960 helo=col-dhcp-192-1-255-188.bbn.com) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1OUM41-000OO7-Dj; Thu, 01 Jul 2010 11:52:33 -0400
Message-Id: <700E34E1-6B18-4D6E-B0C5-DC98174C45C9@bbn.com>
From: "Richard L. Barnes" <rbarnes@bbn.com>
To: dcrocker@bbiw.net
In-Reply-To: <4C2CB739.4030101@dcrocker.net>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v936)
Subject: Re: Admission Control to the IETF 78 and IETF 79 Networks
Date: Thu, 01 Jul 2010 11:52:29 -0400
References: <CFB08C07-DE90-47BE-ADFF-FC72162BBFA1@daedelus.com> <4C2BBD51.2060605@ietf.org> <6.2.5.6.2.20100701070804.0c26b8a0@resistor.net> <6D6E25E2-057B-4591-9288-1283036D0374@cisco.com> <4C2CB739.4030101@dcrocker.net>
X-Mailer: Apple Mail (2.936)
Cc: IETF <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Jul 2010 15:52:23 -0000

There's a difference, however, between ticking a box and having  
individual user-attributable credentials.  The two techniques are  
focused on different goals, generically binding users to an AUP,  
without caring who they are, versus being able to identify individual  
users on the network (with more detail than a MAC address).

The proposal here is the latter, which would seem to raise the  
question of why individual user attribution is necessary, i.e., why  
anonymity in the IETF network unacceptable -- even within the pool of  
IETF participants.

BTW, the trend cited here of more networks requiring more  
authentication also goes the other way:
<http://www.starbucks.com/blog/22761/free-one-click-wi-fi-is-coming>




On Jul 1, 2010, at 11:41 AM, Dave CROCKER wrote:

>
>
> On 7/1/2010 8:26 AM, Fred Baker wrote:
>> While it is new in IETF meetings, it is far from unusual in WiFi  
>> networks to
>> find some form of authentication. This happens at coffee shops,  
>> college
>> campuses, corporate campuses, and people's apartments. I think I  
>> would need
>> some more data before I concluded this was unreasonable.
>
>
> +1
>
> Small towns often have an environment that makes it reasonable to  
> leave one's doors unlocked.  Large cities rarely do.  The IETF is  
> now part of a very big city.  Restricting wifi access to authorized  
> personnel has become not only the norm, but the expected and often  
> the required.
>
> Small added note about physical security:
>
> As SM noted, we don't have monitors at the meeting room doors.  Even  
> with them, meeting attendance includes many local folk.  Once upon a  
> time, IETF meetings constituted an extremely collegial environment  
> among folks who knew each other.  Today, attendance is much more  
> diverse.
>
> One aspect of the diversity is that we need to treat meetings rooms  
> as fully public places, with the attendant risks.  The risk is not  
> terrible, but it /is/ real.
>
> There have been thefts in these rooms, in multiple meeting cities,  
> where property was stolen rather boldly, such as from underneath the  
> seat of an attendee.
>
> We need to watch our personal property as if the person sitting next  
> to us, or behind us, might steal it.
>
> Because some of them have.
>
> d/
> -- 
>
>  Dave Crocker
>  Brandenburg InternetWorking
>  bbiw.net
> _______________________________________________
> Ietf mailing list
> Ietf@ietf.org
> https://www.ietf.org/mailman/listinfo/ietf