Re: [Pearg] Research Group Last Call for "A Survey of Worldwide Censorship Techniques"

Joseph Lorenzo Hall <hall@isoc.org> Wed, 01 July 2020 18:59 UTC

Return-Path: <hall@isoc.org>
X-Original-To: pearg@ietfa.amsl.com
Delivered-To: pearg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 354613A0BE5 for <pearg@ietfa.amsl.com>; Wed, 1 Jul 2020 11:59:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isoc.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j9p8x3cpPmlk for <pearg@ietfa.amsl.com>; Wed, 1 Jul 2020 11:59:45 -0700 (PDT)
Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-eopbgr680054.outbound.protection.outlook.com [40.107.68.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E05B03A0BE2 for <pearg@irtf.org>; Wed, 1 Jul 2020 11:59:44 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=P0AXTCZOkhMZAWe7Guh4DV7Lgz/fz1OF9BpqGiGBIuQwQTy87DkperJHzGCc1Im/tIBf5VtaDzf2kKiEi38b8D9YrVefU6ra0kVscI3qvDPpBtKgojaeWxbVi4bcJYsn1UUOm4ayB3XX5ysOHTa+UoApqR5KPBxuUrJRMmpPShJdb8VyfUHcTIjpjiqGxE9UYBWbbLtr96FX0r28YlZ331RnOd01mD9jKFTmEGPlEIhGOdaVNQhKO8WSYAzROx8sa6PzZleAYpDs/26p2SU9IKQ97uI9Ax8VVfq+XRU4a7+ozSqpTd2uxQbJhe90kaqa7KGCZ3rYWwVHPRPgPq1z4w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=feyww/3tNgqTJaOElDyll2PSSW8IQTRIbJgdUjysgz0=; b=NdrVJtDwGHCS4HLFPyF3rgtms9gqtS1SEVies0zcpSzB3+vJ+ykqONV1nmtyAVfJb7NL8GPsPhtXLBHddPfuBMpjWVC4iM95bj5j8XxzfTkYjjP9ctKEz0Pa413s/EK8cMKluZREJK92WbxmJr1Bm6SrTzFhqONn5VHWHOEJ95Mwb6Yi0qeM4iqYFxWhzPbnYEtfpAgqIr1QFiHFjVohuByITu1UJAblOBml5rXaFAUBOLP2xObdyiup7mZXlDhFnO5OasmpD9onTpZuYmbm3FCMBU14thxy8I/3g4dSTtZUvWBErORFXHK6czVDXHXGaOvq3lp7ftwJVfVASzEsHw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=isoc.org; dmarc=pass action=none header.from=isoc.org; dkim=pass header.d=isoc.org; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isoc.org; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=feyww/3tNgqTJaOElDyll2PSSW8IQTRIbJgdUjysgz0=; b=kAwztNSvHNjQ9rEmU/ANyPqTrMggVHL8irX+uHRNi6lCQ7qMKFDPkA8kQixaslh4+C59WzMW1wt461J1nkVHBXq5tEh7poY3v5uT1CM20cx63HODTIX3umuCYloCa3TyT8Gl44Ggg5nEeNcGn2sArp4BtovDS+JwvI1p3XbCut4=
Received: from BY5PR06MB6451.namprd06.prod.outlook.com (2603:10b6:a03:21e::20) by BYAPR06MB6360.namprd06.prod.outlook.com (2603:10b6:a03:d2::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3131.25; Wed, 1 Jul 2020 18:59:41 +0000
Received: from BY5PR06MB6451.namprd06.prod.outlook.com ([fe80::1c75:dc2:4c7b:e5a2]) by BY5PR06MB6451.namprd06.prod.outlook.com ([fe80::1c75:dc2:4c7b:e5a2%6]) with mapi id 15.20.3153.023; Wed, 1 Jul 2020 18:59:41 +0000
From: Joseph Lorenzo Hall <hall@isoc.org>
To: "S. Moonesamy" <sm+sdo@afrinic.net>
CC: "pearg@irtf.org" <pearg@irtf.org>
Thread-Topic: [Pearg] Research Group Last Call for "A Survey of Worldwide Censorship Techniques"
Thread-Index: AQHWT9ixkGHK9QoCWEarFY+Ona5aHqjzE9uA
Date: Wed, 1 Jul 2020 18:59:41 +0000
Message-ID: <44321D58-F56E-47E2-94BF-ED1B7ECA56A7@isoc.org>
References: <08f43a37-2b7b-418e-95a8-ed57484c66be@www.fastmail.com> <3eba505f-8e85-472c-b22a-660c6ec697c1@www.fastmail.com> <BY5PR06MB6451CAEC5B1CF4FC2C32432EB1860@BY5PR06MB6451.namprd06.prod.outlook.com> <3ed2d30b-9a8d-432f-273e-f2ca183f0f22@andersdotter.cc> <BY5PR06MB6451000D6397DFE09F93BB26B16E0@BY5PR06MB6451.namprd06.prod.outlook.com> <6.2.5.6.2.20200701055337.0d575238@elandnews.com> <6.2.5.6.2.20200701113215.0bf66010@elandnews.com>
In-Reply-To: <6.2.5.6.2.20200701113215.0bf66010@elandnews.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3608.80.23.2.2)
authentication-results: afrinic.net; dkim=none (message not signed) header.d=none;afrinic.net; dmarc=none action=none header.from=isoc.org;
x-originating-ip: [108.56.212.130]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 06192c97-269c-4da2-8542-08d81df0e965
x-ms-traffictypediagnostic: BYAPR06MB6360:
x-microsoft-antispam-prvs: <BYAPR06MB63609CC396C80CD110FB018AB16C0@BYAPR06MB6360.namprd06.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 04519BA941
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: u+j9rLzqlf3tZhtJMNsz0F9LXgd1CRIyEKkdCAdJpANilEJGJBuq8kErn6+3wWIGAGUfpx7fDKJg3mmpnhu6AxPLMylRdXV1jnj2QN1LTraH4rVCk/vykHXSNgQybka+xvL6OHVLr2h/RSVpSAjcGdyeTHPVMgOvFvwB0de03CInEZApoxb++gXwRdA9D8vUM9bvtmtl/PaArxugZAZwDGPvOtERuqzlKt8C9TVyj+SFeVOin6MWI7hisxAxqxOLTLUZ4x4XhZT0M5S2TVwF+r89K58rj8xWUFCEg3v+t43juaEbdXj2FQWIe7p9zMQWBgJ/eexVzrpKXXj9bnNsTZyMIKJvBSFmQcOS4yZkM58o34xiiZFyijzsQHuKl4dA8XA2RfHmv1/4r3OQEj80tg==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR06MB6451.namprd06.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(376002)(136003)(346002)(39840400004)(366004)(396003)(166002)(33656002)(316002)(478600001)(6486002)(4326008)(71200400001)(5660300002)(2616005)(53546011)(66946007)(83380400001)(66556008)(76116006)(8676002)(6506007)(186003)(86362001)(36756003)(6512007)(8936002)(66574015)(64756008)(2906002)(66476007)(66446008)(91956017)(966005)(26005); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 2ODx74/lmgKKeqPauuchlwBvFv6S95rpzVFc7CSXgOVHWgznhzflj5SnBi64IAt7Kkqyx7Cswv04ydhAhYmqpoY8xYvse0y8V0yLUhZgEVGqGt4RvVtrWh/fR2hqnwO+0LsB0sALrX7LkfDIvRzaXUXs+tcoiE0iAjXzLEsPfD68XeV3elEceO7/oyLF2nz429A56lGgem2j3Q64NcP/JC67l4lnP052HcvVJeUZYINnVmcRhWsV1jn9kmnQVo2hUU/kqXwkFfZA9ptgjX9XzPWEagTJsY6Id7jApMZgkhfWxiXceuc2EkeF7YnDd9IKE0YnW4FwASL/hChIiuhQX4JXFBzCTjJHpfDf1B92qISTtbelZgUzKGpFxHXTgeOFn5EWEqUYlMtMbK+a68XmIbOeB0s7r2TJTqnnCQC/jsHp58125m9+v31/y5dwe5bXZ+4kpencPvMtJqgobzIHORNHiy1AgSTclAyrqMoBCa3F8wDNkL8WVFYZ88iWplUR
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_44321D58F56E47E294BFED1B7ECA56A7isocorg_"
MIME-Version: 1.0
X-OriginatorOrg: isoc.org
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BY5PR06MB6451.namprd06.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 06192c97-269c-4da2-8542-08d81df0e965
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jul 2020 18:59:41.6712 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 89f84dfb-7285-4810-bc4d-8b9b5794554f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: rjzaOahclLqC6YO7BLxey2ko+28MD6H7qaUpcBGxasfwwO8Ha/9DoMgGut9ZVRwz
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR06MB6360
Archived-At: <https://mailarchive.ietf.org/arch/msg/pearg/DBbC9JD7_LUQnY3bQnGD0bWKOdU>
Subject: Re: [Pearg] Research Group Last Call for "A Survey of Worldwide Censorship Techniques"
X-BeenThere: pearg@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Privacy Enhancements and Assessment Proposed RG <pearg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/pearg>, <mailto:pearg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pearg/>
List-Post: <mailto:pearg@irtf.org>
List-Help: <mailto:pearg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/pearg>, <mailto:pearg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Jul 2020 18:59:47 -0000


On Jul 1, 2020, at 2:51 PM, S. Moonesamy <sm+sdo@afrinic.net<mailto:sm+sdo@afrinic.net>> wrote:

Dear Joseph,
At 10:51 AM 01-07-2020, Joseph Lorenzo Hall wrote:
(I'm slowly getting back into this set of conversations, sorry PEARG! The close of the second quarter is a tough time.)

Thank you for the quick response.

S., are you asking for an example of this happening or for clarification on how such a thing might compromise such guarantees? I'm not sure if we have an example but you'll notice that a whole slew of those thing are hypothetical in that we haven't seen certain kinds of interventions.

I was asking for an example of it happening.  For what it is worth, I read RFC 6482 and I didn't find anything about ROAs being a potential issue.

Section 5 of the RFC states that: "There is no assumption of confidentiality for the data in a ROA".  I also took a quick look at RFC 6480 in case I missed anything.  Where does the "confidentiality guarantees" come from?

I think what the wording of the draft is trying to do there is to point out that if you can compel a signed route, ASs will tend to start sending traffic that direction, potentially compromising the confidentiality and integrity of the traffic, not the ROA. I’m happy to make that clear. Also, feel free to push back and say that it’s out of place… this part is trying to catalog entities in positions of power that could affect the ability of two ends to communicate.

--
Joseph Lorenzo Hall, Senior Vice President, Strong Internet
hall@isoc.org<mailto:hall@isoc.org> | +1-703-483-9504
internetsociety.org<http://internetsociety.org> | @internetsociety
pgp: https://josephhall.org/gpg-key
3CA28D7B9F6DDBD34B1016075F86698740A9A871