[nasr] Re: 回复: Re: Secure Routing Path Consideration- China Mobile-ietf120

[刘鹏辉 <[e-mail]>]

I mean beside the usecase for business secret protection, which already can be met by VPN,  mybe we need some addtional cases for meeting this kind of law, legal compliance?




Anyway, if there would be sufficient protective measures, GPDR allows for the transmission of data across borders. but we have no positive usecase for the “ no go abroad”，the related technology cannot evolve for long time....




At 2024-08-13 11:07:12, "Liuchunchi(Peter)" <[e-mail]> wrote:

> What is the exact significance of this demand of NASR, just meet this kind of law?......

 

It is for leakage prevention purposes, for both business secret protection and legal compliance considerations.

 

> the law may not be written in such detail, personally I think it should be the Terrestrial boundary...

 

By the time of lawmaking I think no technology permitting such promise was available.

By terrestrial boundary, I think meiling means it is not the ONLY factor when orchestrating a path—device integrity and free of tampering for example is another key factor should be considered when orchestration.

 

PCL

 

From:刘鹏辉 <[e-mail]>
Sent: Tuesday, August 13, 2024 10:30 AM
To: Meiling Chen <[e-mail]>
Cc: Michael Richardson <[e-mail]>; [e-mail]
Subject: [nasr] Re: 回复: Re: Secure Routing Path Consideration- China Mobile-ietf120

 

Large cloud vendors have different server regions in different countries and operate across borders, the law may not be written in such detail, personally I think it should be the Terrestrial boundary...

 

What is the exact significance of this demand of NASR, just meet this kind of law?......

 

At 2024-08-09 18:00:06, "Meiling Chen" <[e-mail]> wrote:

Indeed, after considering the example mentioned by Mic, 

Terrestrial boundary is not the only determining attribute, need more properties for real no go abroad, right?

 

Best,

Meiling

 

From: Michael Richardson

Date: 2024-08-05 03:13

To: =?UTF-8?B?5YiY6bmP6L6J?=; [e-mail]

Subject: [nasr] Re: 回复: Re: Secure Routing Path Consideration- China Mobile-ietf120

 

I don't see anything in your summary of GDPR that says that encrypted PII can

not cross another territory.

 

At each end the GDPR clearly applies, but for example, I see nothing in your

description that prevents data from Geneva to Bern (both in Switzerland) from

travelling on fiber to the south of Lake Geneva/Leman.  That is, through

France. (is that a better route for fiber? Probably not. But a redundant

microwave link from mountain to mountain would make a lot of sense)

(Or: Zagreb to Bucharest, both EU countries, via Belgrade)

Does GDPR really apply here?

 

I'm sure such edicts exist, but if GDPR mandates this, it would be best to have

a very specific clause referenced.

 

--

]               Never tell me the odds!                 | ipv6 mesh networks [

]   Michael Richardson, Sandelman Software Works        |    IoT architect   [

]     [e-mail]  http://www.sandelman.ca/        |   ruby on rails    [