decentralization of Internet (was Re: Bruce Schneier's Proposal to dedicate November meeting to saving the Internet from the NSA

Roger Jørgensen <rogerj@gmail.com> Fri, 06 September 2013 20:32 UTC

Return-Path: <rogerj@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4801D11E810C for <ietf@ietfa.amsl.com>; Fri, 6 Sep 2013 13:32:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.3
X-Spam-Level:
X-Spam-Status: No, score=-2.3 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BP6-y8XBRqkk for <ietf@ietfa.amsl.com>; Fri, 6 Sep 2013 13:32:43 -0700 (PDT)
Received: from mail-wi0-x22a.google.com (mail-wi0-x22a.google.com [IPv6:2a00:1450:400c:c05::22a]) by ietfa.amsl.com (Postfix) with ESMTP id 11C4A11E80F9 for <ietf@ietf.org>; Fri, 6 Sep 2013 13:32:42 -0700 (PDT)
Received: by mail-wi0-f170.google.com with SMTP id cb5so1394203wib.3 for <ietf@ietf.org>; Fri, 06 Sep 2013 13:32:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:cc:content-type; bh=UPbK5y4UqXict6HkYKEsRr10y8BPWz7R0s5G6hp8qNU=; b=RUieLVh8GY32RUd/vlZayb7pcgK40i0LhVxJ/Nzzly1O+yAnKimM1eKl7AuDZV3EMN pUeLLpXc00n6dGBsMX0XyIhUIIbclgvaQZ1e8duxZNQJIvTEgHaS9wv65eAKNL23PsTP tVyiEWbkpe7zCCGOhVE7pFX3NhJDWldfqtQZhImbsaH8LWzZQotuO/fCNgdNxYuS2JOb VUyqyk8jnOwvKfDIO+PN1/vy7vop/dXJmwaOoMeKeQa1Tf4Y3rSnPFil9MJ0rkXJNEb1 DcwOei2dwgfEajakSCIhQSmxvStnSBiprgMyK41Eb01gZRbxZUAbE2dEvguVfatHkfM+ x0eg==
MIME-Version: 1.0
X-Received: by 10.180.20.42 with SMTP id k10mr513685wie.0.1378499562145; Fri, 06 Sep 2013 13:32:42 -0700 (PDT)
Received: by 10.216.213.72 with HTTP; Fri, 6 Sep 2013 13:32:42 -0700 (PDT)
Date: Fri, 06 Sep 2013 22:32:42 +0200
Message-ID: <CAKFn1SEa_OV+HNJFdfD+gN_Gcs8Ni5up1o4C2-yy_rztYpe_ew@mail.gmail.com>
Subject: decentralization of Internet (was Re: Bruce Schneier's Proposal to dedicate November meeting to saving the Internet from the NSA
From: Roger Jørgensen <rogerj@gmail.com>
To: Adam Novak <interfect@gmail.com>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: IETF Discussion <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Sep 2013 20:32:44 -0000

On Fri, Sep 6, 2013 at 9:47 AM, Adam Novak <interfect@gmail.com> wrote:
><snip>
> One way to frustrate this sort of dragnet surveillance would be to reduce
> centralization in the Internet's architecture. Right now, the way the
> Internet works in practice for private individuals, all your traffic goes up
> one pipe to your ISP. It's trivial to tap, since the tapping can be
> centralized at the ISP end.

excellent idea... any suggestion on how that should be done?

Only one I can remember right now are LISP which sort of create a new
network on top of our current network, and the EID-block drafts being
worked on by some people (including me) tries to address how the
IP-space of this "new" network can be done.

But there must be other ways than through LISP-alike way of doing it?


> The IETF focused on developing protocols (and reserving the necessary
> network numbers) to facilitate direct network peering between private
> individuals, it could make it much more expensive to mount large-scale
> traffic interception attacks.

Think there are work being done on the topic? However, how are you
going to interconnect all of this private peerings? It sort of imply
that everyone need to have their own netblock they can exchange with
others.



-- 

Roger Jorgensen           | ROJO9-RIPE
rogerj@gmail.com          | - IPv6 is The Key!
http://www.jorgensen.no   | roger@jorgensen.no