[lisp] Fwd: decentralization of Internet (was Re: Bruce Schneier's Proposal to dedicate November meeting to saving the Internet from the NSA

[Roger Jørgensen <[e-mail]>]

forward from a discussion on ietf@


---------- Forwarded message ----------
From: Roger Jørgensen <[e-mail]>
Date: Sat, Sep 7, 2013 at 12:30 PM
Subject: Re: decentralization of Internet (was Re: Bruce Schneier's
Proposal to dedicate November meeting to saving the Internet from the
NSA
To: Noel Chiappa <[e-mail]>, IETF Discussion <[e-mail]>


On Sat, Sep 7, 2013 at 5:05 AM, Noel Chiappa <[e-mail]> wrote:
>     > From: Scott Brim <[e-mail]>
>
>     > The encapsulation is not much of an obstacle to packet examination.
>
> There was actually a proposal a couple of weeks back in the WG to encrypt all
> traffic on the inter-xTR stage.
>
> The win in doing it in the xTRs, of course, is that you don't have to go
> change all the hosts, application by application: _all_ traffic, of any kind,
> from that site to any/all other sites which are encryption-enabled, will get
> a certain degree of confidentiality.
>
> Does this count as something the IETF can do reasonably quickly that will
> help somewhat? :-)

One easy fix then would be to have a MUST encrypt traffic between
xTRs, and that the encryption used MUST be strong. Are LISP@WG up for
the challenge? :-)

The userbase and deployment are relative small atm so it's doable to
get fast deployment to.



--

Roger Jorgensen           | ROJO9-RIPE
[e-mail]          | - IPv6 is The Key!
http://www.jorgensen.no   | [e-mail]


-- 

Roger Jorgensen           | ROJO9-RIPE
[e-mail]          | - IPv6 is The Key!
http://www.jorgensen.no   | [e-mail]