Re: [saag] Ten years after Snowden (2013 - 2023), is IETF keeping its promises?

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 05 January 2023 20:32 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BC3CC1522BD; Thu, 5 Jan 2023 12:32:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MUXctRSFCfQM; Thu, 5 Jan 2023 12:32:04 -0800 (PST)
Received: from mail-pf1-x429.google.com (mail-pf1-x429.google.com [IPv6:2607:f8b0:4864:20::429]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 518C2C14F720; Thu, 5 Jan 2023 12:32:04 -0800 (PST)
Received: by mail-pf1-x429.google.com with SMTP id w203so9580102pfc.12; Thu, 05 Jan 2023 12:32:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=6W4wyXEuVJLNnfJcFfdH0bh43eP3G3XuA4xPGlZU9F0=; b=CCaPZCKh1DnTCdkAGnquWqW59gTnnVhlNC24Z1sxqCyOUjHQpUCfX+SJ47v8BgJmIC tCBFBIlu8+oatrgQfsiIjkSU+PasZKXayzyQaozagychK86nGRYrwCzj+YXkBP9WDOhd Hm4j913QBs74jQgBbsRyr2Cme3v7PgDbjOXiDAFzQCN2sAps8ARZru6uXVmunfpADOW1 7szIIuW6VkYIZ1YR8kUPLr2zSq3E6PZKBTmnhvith5I6kUmeqlHGJGlveFgR2nobW19z q8halcnifwiaA6GEJnlqvNAQnRBICug2Rn7aOHBdFB2EdPCOy9ZnRalh0trw8FoxZoCc L9sQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=6W4wyXEuVJLNnfJcFfdH0bh43eP3G3XuA4xPGlZU9F0=; b=DBXzYDO8z7CjtvJFqVnUEiT6LjJzAsP8OYETCZhSt8xDwbRzpPyhEl7bJmwJZx/q3L rm4qBWgYlbyLewSgoXCI0uCykgvFjhItnsWIQxLKUnIPvz8ogy1tTu2SPIuRrmE6wnHy 52rBIkAPeoA3kXN/VKqVoVMFd2WHNDNbjk7/j/dgtM0LE5VyIsZqoeNh/X7ysUO5fqXM v7z9/HHNzII2Kqu7/BvzQi2FIBO6ljYcqSapk/xqll676cLgRi9Oo8Hqk6h7ccRWaRhg S72UhQ4JpSFlxgeDb7houRADt1kF+z7tSyf60e7TbeOHI0CStd8WX4q84x6kA/4OhbnM OSuA==
X-Gm-Message-State: AFqh2kpmLQ9a5J01TiKKSOIMP2vvM60nnOCpywQQo2wCutpPy2Acptz/ dHsWcSmmawM1zqKEmd15qLM=
X-Google-Smtp-Source: AMrXdXs+dXPdD1dh6I2yJFwN5Tr7lsjiUlF4sgsjixJQShQpaJxGq6uLSXSgiE8MwYGZdXGzuSGEcA==
X-Received: by 2002:aa7:83d1:0:b0:580:d71e:a2e5 with SMTP id j17-20020aa783d1000000b00580d71ea2e5mr40689406pfn.22.1672950723734; Thu, 05 Jan 2023 12:32:03 -0800 (PST)
Received: from ?IPV6:2406:e003:10c2:2501:6969:5efe:7979:3937? ([2406:e003:10c2:2501:6969:5efe:7979:3937]) by smtp.gmail.com with ESMTPSA id 68-20020a620447000000b00578199ea5afsm24781299pfe.9.2023.01.05.12.31.59 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 05 Jan 2023 12:32:03 -0800 (PST)
Message-ID: <54d826c2-1743-6bb2-d99e-73153d39d8db@gmail.com>
Date: Fri, 06 Jan 2023 09:31:56 +1300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.10.0
Subject: Re: [saag] Ten years after Snowden (2013 - 2023), is IETF keeping its promises?
Content-Language: en-US
To: Stewart Bryant <stewart.bryant@gmail.com>
Cc: George Michaelson <ggm@algebras.org>, Lloyd W <lloyd.wood=40yahoo.co.uk@dmarc.ietf.org>, Antoine FRESSANCOURT <antoine.fressancourt=40huawei.com@dmarc.ietf.org>, IETF Discussion Mailing List <ietf@ietf.org>, pearg@irtf.org, John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, saag <saag@ietf.org>, Dino Farinacci <farinacci@gmail.com>, hrpc@irtf.org
References: <3c3230f3783b4ec9a8a9e3bb87cc2a8d@huawei.com> <08C49067-DB4C-41AB-A6F3-B96BDBE0A4BC@yahoo.co.uk> <CAKr6gn0tFXEV-h7LH1_Ts5iQRw_mGEi=TqS7hsyK-SqDFmmY-A@mail.gmail.com> <5e37bbe7-c785-6f52-7841-6562d8e77fe1@gmail.com> <E8FFCD47-FE30-4154-A370-E26362587253@gmail.com>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
In-Reply-To: <E8FFCD47-FE30-4154-A370-E26362587253@gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/b1eCasm9CKrKC3dN_rF3j7nxQWM>
X-Mailman-Approved-At: Fri, 06 Jan 2023 08:28:01 -0800
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IETF-Discussion. This is the most general IETF mailing list, intended for discussion of technical, procedural, operational, and other topics for which no dedicated mailing lists exist." <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Jan 2023 20:32:08 -0000

On 05-Jan-23 22:13, Stewart Bryant wrote:
> That was 2014
> 
> MPLS was an old (and widely deployed) protocol by then and is sourceless even in mp2p applications.

True, but the topic was layer 3 addressing. Also, many point-to-point protocols are addressless and always have been.

    Brian

> 
> Stewart
> 
>> On 4 Jan 2023, at 21:24, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>>
>> Credit where it's due: Sourceless Network Architecture was described many years ago:
>>
>> https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-849.pdf
>>
>> Regards
>>    Brian
>>
>> On 04-Jan-23 22:35, George Michaelson wrote:
>>> Put a nonce source ip in the packet header and the real source as 4-16 bytes of PFS protected payload.
>>> Use asymmetric routing. A single point of capture which isn't close to source or destination is occluded.
>>> Can't fix a warrant tap, but can at least obfuscate for on-path.
>>> G
>>
> 
> .