Re: new RRTYPEs, was DNSSEC architecture vs reality

[Phillip Hallam-Baker <[e-mail]>]

On Thu, Apr 15, 2021 at 6:11 AM Vittorio Bertola <
[e-mail]> wrote:

>
> Il 14/04/2021 21:57 Phillip Hallam-Baker <[e-mail]> ha
> scritto:
>
> Yes, this does leave money on the table but I reckon that there Mesh
> foundation needs an income of about $10 million /year to do what I want it
> to achieve. Running the registry should cost less than a million. The rest
> will go to funding open source specs and reference code, funding
> conferences, etc. etc.
>
> And the IETF. I mean, the IETF, through several indirection layers, gets a
> big chunk of its funding from the fact that ISOC runs .org. If this dries
> up in favour of your foundation, I'm sure that you will be willing to pick
> up the sponsorship of the IETF - and also of all other events and
> organizations that currently get sponsored by a gTLD registry.
>

That is not my concern and should not be the concern of the IETF. A member
of ISOC told me the potential conflict of interest was one of the
motivations for the sale. It is a real pity that the EFF decided to stab us
in the back with their own fund raising effort.

I am not the guy who is creating the conflict of interest here, that is for
ISOC to sort out. Of course, the fact I am putting a proposal on the table
that makes the conflict relevant might well give them the ability to submit
a new proposal. I would suggest that the jack up the prices first so that
concern is also neutralized.

At this point I have been a part in starting or making major changes in
direction to two other standards bodies and played a leading role in
forming two industry associations. I am using IETF to provide the Note Well
IPR cover, I am not asking anyone for permission, that is not how I work.


But wait, there's more: in many countries, ccTLD registries are a
> significant source of funding for all sorts of national Internet projects -
> research, localization of technology, education, events, industry
> standardization, governance discussions, content policy enforcement, you
> name it. You would of course need to spread your funds evenly throughout
> the planet.
>

Not my problem to replace other people's rents. even if they give a
pittance back in charity.

In case you hadn't noticed, the mail system and the telephone numbering
system are both in widespread use today despite the underlying technologies
being obsolete. Most people still have fax numbers on their business cards
(!). I think it really unlikely DNS names are going to go away in our
lifetimes. The 'worst' that could happen is the pace of growth slows
somewhat and the speculative activity moves away. I don't think we will
seeing the denizens of ICANN-land selling their yachts.

No, as they put it in the Godfather, I am not a communist. The not for
> profit registry is separate from my for-profit Mesh Service Provider and
> apps businesses.
>
> The tricky part here will be to make sure that certain names with valid
> IPR claims end up in the right place. Obviously, @microsoft, @apple, @cisco
> etc. have to go to the right place or there is a security issue. But again,
> read the draft.
>
> Well, it took seven years for ICANN to decide whether ".amazon" should go
> to Amazon the company or to Amazon the geographic region as represented by
> ACTO (
> https://en.wikipedia.org/wiki/Amazon_Cooperation_Treaty_Organization) and
> by the sovereign countries that formed it, and even after the decision was
> taken, the concerns and the complaints have not ended yet. Perhaps you can
> come up with a better, more fair solution that will not create
> international tensions and will not just award politically, socially or
> religiously relevant names to those that show up with the biggest pile of
> money (speaking of diversity and inclusiveness...). However, your draft
> seems silent on this kind of problems, which are also part of the reason
> why domain names have a price way higher than their operational cost.
>

I am sure it doesn't cost a quarter million dollars to do this. In fact I
know that it doesn't. I was Principal Scientist for VeriSign for over a
dozen years. I know these issues at least as well as anyone else. In my
case the answer is very easy: I need Jeff Bezos on my side for the Mesh to
be successful and it is essential that @amazon resolve to the place most
expect. For similar reasons, the claims made for @google by those claiming
to represent the number are not something to worry about.

[Oh and no, I am not so naive as to accept for an instant the premise that
the .amazon bunfight is anything more than an attempt to use indigenous
rights as a pretext to extort a large amount of cash from a party with deep
pockets, absolutely none of which will ever go to the people on behalf of
whom the claim is being made.]


Did they take seven years because it was a difficult problem or because it
was easier to not make a decision? I rather think the latter. What you are
showing is how the ad hoc rentier model failed.



> I do not necessarily disagree with your idea, but it looks to me that you
> are underestimating its non-technical impact if it ever succeded - or, if
> you prefer, the amount of pushback against implementation for non-technical
> reasons.
>

I have done core crypto for over 25 years. That work makes a heck of a lot
of governments unhappy. It is the main reason I live in the US rather than
the UK: the legality of my work was certainly not accepted by HMG when I
started.

The Callsign registry isn't just a name registry, it is the hub of a PKI.
Which is why I believe it has a chance of being successful. Every callsign
registered is bound to a public key by definition. And that binding is
immutable, it can be superseded but never erased. So it provides a
functionality the legacy systems never can.

There will be no such thing as 'callsign validated certificates': The
callsign is the key.

There is a business model for CAs of course. Just not the current model
which Google is trying to dismantle anyway.

Dismissing complex claims by incumbent rent seekers is not 'ignorance', it
is a deliberate design decision taken with full awareness of the
consequences. There are some stakeholders I need, some that can be helpful
and others I choose to ignore.