Re: AD Sponsorship of draft-moonesamy-recall-rev

Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> Tue, 23 April 2019 17:22 UTC

Return-Path: <kathleen.moriarty.ietf@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1B5F120497; Tue, 23 Apr 2019 10:22:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dvJwlWRmUF8s; Tue, 23 Apr 2019 10:21:59 -0700 (PDT)
Received: from mail-oi1-x229.google.com (mail-oi1-x229.google.com [IPv6:2607:f8b0:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D807B120494; Tue, 23 Apr 2019 10:21:58 -0700 (PDT)
Received: by mail-oi1-x229.google.com with SMTP id a6so11937648oie.5; Tue, 23 Apr 2019 10:21:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=NYoMsU5QTwTKf67R5aFa4H8B7VD1TtsBWYR6lVwA8So=; b=n/R10wCXzfn+nhlg/Bqg/SzduVgJoOX1YMUFNWlfWzkW0fxlS4AUdK4lspnDU/vKbg F+UHAODnwiuK/DuLHpmgEtE1XyzKAKalehgudvxpN3y8VBjYVbd3JkXob3lGLMmi+F1U N5xNiSS6mk8wrznc7Ujt80+tfaIArfM0QYisAwHulbE5eQ3uiJ7FU2XE4gE5eJwYMUjP rDbvOvvw58MnfSubGQC8h3WFvi9nBrqeXX6T+/j3rYVp1jXJ1MdE1JrSXXPOmawbmAos 7LhO4ZDisy8Ki8mrUJTwBHFhPbeOfmYO97NyXpjt3wFGvLKTjbSUyCEviV2AFQ3c5Vt7 vK6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=NYoMsU5QTwTKf67R5aFa4H8B7VD1TtsBWYR6lVwA8So=; b=XpELe8Oz3wdSLH53nk5K43HVWvGOIW/Fhpl+jNnNDutSR1SVsJMyNd9M3G92mvz+pE XJ3SB5W0AIPvlGVQBu7haldKevkFidVyFhAiAvDS5XZp4X2AL3/bzEdzVIxsRJJSRHMr iOMjyyRB1aSwqITVRc0uBoostaVSwyBYlZGvvcgTWCps7OdE+8CqQ0tmRD1GJ9RhC74J PBySnNMNdREGbPX0NzAb5aW+ldkiNLLUyRXNwKz6hzVK1ziuOG2k859PAl2iZm9alRi7 Hpr7BUL5L1109MYkT9OPEU3o6tcVHvCHZe1fdUwDe5nN6v0SkG77P6veglLlCnVZ+n+O /ZGA==
X-Gm-Message-State: APjAAAVRUe054mhNERIqQFARvlbALfrzc+XDHcd57eIIWvo6CBLUsOss locU4hGve+p5c00QAF6ofCAuCintVmGdyidZ5ZE=
X-Google-Smtp-Source: APXvYqye0g0RqnRyM0libEASuM+qUC0z7nO/dwd8rkZX8xSW36+WCII/IW7QYdf33mTaWLQY/FXkhB83aMM+xyFOV+c=
X-Received: by 2002:aca:d617:: with SMTP id n23mr2449549oig.164.1556040118034; Tue, 23 Apr 2019 10:21:58 -0700 (PDT)
MIME-Version: 1.0
References: <6.2.5.6.2.20190405085139.0d5c39b0@elandnews.com> <54510B49-175B-4CE6-9319-1F9A4803940E@cooperw.in> <033d01d4f52f$c6f2dca0$54d895e0$@olddog.co.uk> <BB40F115-46E8-4EF3-ABDE-15ABB33B4ACA@akamai.com> <C11980900F520E0EFCC83CEB@PSB> <A18C5417-F40B-4DC4-B6AB-BA0A592D15D3@cooperw.in> <A88B303ADC96DADCB138B3E7@PSB> <2BCCA51C-C993-491B-8162-52110B63CF1B@akamai.com>
In-Reply-To: <2BCCA51C-C993-491B-8162-52110B63CF1B@akamai.com>
From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Tue, 23 Apr 2019 13:21:21 -0400
Message-ID: <CAHbuEH6oYfnqndHUwoihV1wARbGN6RDU2JvrR-SvAGJaNe1x2A@mail.gmail.com>
Subject: Re: AD Sponsorship of draft-moonesamy-recall-rev
To: "Salz, Rich" <rsalz@akamai.com>
Cc: John C Klensin <john-ietf@jck.com>, "ietf@ietf.org" <ietf@ietf.org>, IESG <iesg@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000007de46e058735d2ff"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/jcL6AfOqAs9iOh8Vdu_cWWfU2qo>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Apr 2019 17:22:01 -0000

On Sun, Apr 21, 2019 at 12:35 PM Salz, Rich <rsalz@akamai.com> wrote:

> >  If one were trying to disrupt the IETF, mount a DoS
>     attack, or impose large costs on the community, the need to work
>     that far in advance would be a significant deterrent given that
>     other, faster and easier mechanisms are readily available.
>
> There are national-scale attackers which probably find it cheap to get
> people doing this.
>
> Exactly.  Sock puppets are used to carry out this type of attack with one
person acting as tens of personas.  Bots have also been quite effective,
with it taking multiple angles to detect that they are a bot (not trivial).

It's not a threat model I worry about but YMMV.
>

I'm not either as the cost may be too high now, but that may not persist
for too much longer.  "Like War" is an interesting read on this topic.


-- 

Best regards,
Kathleen