Re: Observations on (non-technical) changes affecting IETF operations

Stephen Farrell <stephen.farrell@cs.tcd.ie> Mon, 07 March 2016 13:51 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30D491B4116 for <ietf@ietfa.amsl.com>; Mon, 7 Mar 2016 05:51:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.302
X-Spam-Level:
X-Spam-Status: No, score=-4.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HJ-GE0Am3vE9 for <ietf@ietfa.amsl.com>; Mon, 7 Mar 2016 05:51:43 -0800 (PST)
Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 051B61B4115 for <ietf@ietf.org>; Mon, 7 Mar 2016 05:51:43 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 2C80DBE53; Mon, 7 Mar 2016 13:51:41 +0000 (GMT)
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JzCOctpKOje7; Mon, 7 Mar 2016 13:51:41 +0000 (GMT)
Received: from [134.226.62.192] (cswireless62-192.scss.tcd.ie [134.226.62.192]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id A84DCBE29; Mon, 7 Mar 2016 13:51:40 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1457358701; bh=MMVvVIX/GpOHq/LWHAhroLl4KTvklFV/Kko//aOQSQA=; h=Subject:To:References:From:Date:In-Reply-To:From; b=VvJmOHgFHKrDzHaUCQlT+USkpvOsXKNquegR7Ma5wFm9sjY6TIgXmq4YApafTxXXu qpbu3KVFHJjwhNY8RiyB9pTmTvdEghM6gBW+Vpplwy3VYxkW41vPR+N8eR5Gs2QzuL IPy+Us480/sI33CVTNRcf/9zyNhklpzSinegD2Lk=
Subject: Re: Observations on (non-technical) changes affecting IETF operations
To: Rich Kulawiec <rsk@gsp.org>, IETF <ietf@ietf.org>
References: <E83FC2B4-867D-44C9-AE1B-F4C414ABD041@piuha.net> <4A95BA014132FF49AE685FAB4B9F17F657DF2330@dfweml701-chm> <EDFB7D0B-2A49-46BD-A84C-0E1FA07793FA@piuha.net> <20160307133944.GB25576@gsp.org>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url=
Message-ID: <56DD876C.6050008@cs.tcd.ie>
Date: Mon, 07 Mar 2016 13:51:40 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1
MIME-Version: 1.0
In-Reply-To: <20160307133944.GB25576@gsp.org>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="------------ms000908080103030502000000"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/oNeoAPJEG3DeibB3mcaikgBX8fc>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Mar 2016 13:51:45 -0000

Hiya,

On 07/03/16 13:39, Rich Kulawiec wrote:
> On Sun, Mar 06, 2016 at 04:58:19PM +0000, Jari Arkko wrote:
>> However, from my perspective there are some pretty big things in the
>> works and big problems that people should solve, for instance:
> 
> [snip]
> 
>> * privacy in the Internet
>> * security in the Internet of Things
> 
> These are connected and in desperate need of serious attention.  I've
> spent some of the past few years studying these areas and the situation
> is awful...and getting worse in a hurry.  The rush to market new devices
> has turned into a stampede, with the accompanying construction of enormous
> data-rich repositories, often stuffed full of data collected without
> informed consent and lacking even a token level of security.

Yes, the security and privacy properties of many small devices
that people sell are horrible.

> I think the IETF could (and should) make substantial contributions
> in this area.  But if we're going to do so, we need to dive in now.

Can you be more specific? (Bearing in mind that we're not the Internet
police and nor are we the "crap small device" police;-)

We do have some work going on in this space (e.g. cose, ace) and I'd
not be at all surprised if people were up for more of that if there
are topics that are good ones for the IETF to tackle.

Cheers,
S.

PS: If a lot of discussion ensues, we might be better off having
that discussion on the saag@ietf.org list, but let's see how it
goes for now.

> 
> ---rsk
> 
>