IETF Logo Mail Archive

Re: [Pearg] [saag] Ten years after Snowden (2013 - 2023), is IETF keeping its promises?

Dino Farinacci <farinacci@gmail.com> Wed, 04 January 2023 19:54 UTC

Return-Path: <farinacci@gmail.com>
X-Original-To: pearg@ietfa.amsl.com
Delivered-To: pearg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B01F6C1522BC; Wed, 4 Jan 2023 11:54:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nOekC4PhTBfd; Wed, 4 Jan 2023 11:54:42 -0800 (PST)
Received: from mail-pf1-x42c.google.com (mail-pf1-x42c.google.com [IPv6:2607:f8b0:4864:20::42c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49672C1522AA; Wed, 4 Jan 2023 11:54:42 -0800 (PST)
Received: by mail-pf1-x42c.google.com with SMTP id w203so7002233pfc.12; Wed, 04 Jan 2023 11:54:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=9Qc/zYol1zb2Cmp2c8SJ46I3iqnkspuQmWtJDaLqpqg=; b=Y7qHNwTBQQWYaiAxooEHEEWgZRNxm5IUHTpFW7B9JhgNU3U1AjhF+j7TWEcY3EOU9l zxek/WkX6JJv7p8ZDm+HxZQ7mEZmMTFXfm1U440Ez4MA9vXOcb4+REkisgyOxbbYfokB OwcSUL5Y3kCYT+1CR1C6/OBKox4K+jtI8YcpmobzirPw6R8z4OmZB07vUmMLWQo9Ojy7 bH05GWx4+BQaF3wg3QPYoSVdITeRfmqbMubXNeuH9j/sQp47XdmKpXIeIsF6RGWTqfAN 0D4FT7zjGq0RoIqvKlpNhhL6Os9WtbMf4wpsWuTHwEvbCXNHB5DqK7hgISA4YxwS6kKJ bZGA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=9Qc/zYol1zb2Cmp2c8SJ46I3iqnkspuQmWtJDaLqpqg=; b=xld6JXZ5hznA1iyaXSwBSZ/5gRqzSRMhq4Aiigb4ttOC4F8G2jHgFOcQ0XSM052V0I DBlNFdvBP8v4kx0ondC5hDDlEJj9fRmG1FqdA+zNEQPbB3njA3EG9pEWIczDTVH7TT4X Oego1dy68BOzmfSzuQ+AamZu27CH0nqUWUKL5t5gvt89ok0k/U5+vI2A8NUFU9+/t5Qb q+K8Xxx4jzU/y/JIEepatyy447bm/q05H1nNwe1Ik/o+TcXq4Vd/LUGQ8zG3EXjWEmXB xd5VRUXABx3p+QWwuIePX/ytAryl/bF9HKXBrpeu23zJ+/qM1D1yqK8ulY7CxWOsAji6 wTdw==
X-Gm-Message-State: AFqh2kpyM2AAXLfbomd+Yt1Qicjd8uoUp9TOWPLe0iIso9ebT3+0ih1N OYIWhhOQ1+oBRULtgkOo0COBXkeHT624Jg==
X-Google-Smtp-Source: AMrXdXtq7F5tydtXhx4Xx6l6l/2TUcA/Z+H/yz0s/93+n1n/0LYfF+7YTfXcI6C7OMe1+aq6/0XFuQ==
X-Received: by 2002:aa7:8c15:0:b0:583:1268:f994 with SMTP id c21-20020aa78c15000000b005831268f994mr1218887pfd.33.1672862081624; Wed, 04 Jan 2023 11:54:41 -0800 (PST)
Received: from smtpclient.apple (c-98-234-33-188.hsd1.ca.comcast.net. [98.234.33.188]) by smtp.gmail.com with ESMTPSA id u64-20020a626043000000b0056ba6952e40sm5556235pfb.181.2023.01.04.11.54.40 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Jan 2023 11:54:40 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
From: Dino Farinacci <farinacci@gmail.com>
In-Reply-To: <9E792EAB-29DF-4A7F-8F6B-BD5BF8041167@gmail.com>
Date: Wed, 04 Jan 2023 11:54:39 -0800
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, John Mattsson <john.mattsson=40ericsson.com@dmarc.ietf.org>, ietf@ietf.org, hrpc@irtf.org, pearg@irtf.org, saag <saag@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <F90CD209-28BB-4148-849E-109271C7E93B@gmail.com>
References: <9C9FAB23-D95D-4BB6-820C-95DA8018451B@gmail.com> <9E792EAB-29DF-4A7F-8F6B-BD5BF8041167@gmail.com>
To: Stewart Bryant <stewart.bryant@gmail.com>
X-Mailer: Apple Mail (2.3696.120.41.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/pearg/XHq1zGUnMFIS1sTW59fWaAZf4oA>
Subject: Re: [Pearg] [saag] Ten years after Snowden (2013 - 2023), is IETF keeping its promises?
X-BeenThere: pearg@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Privacy Enhancements and Assessment Proposed RG <pearg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/pearg>, <mailto:pearg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pearg/>
List-Post: <mailto:pearg@irtf.org>
List-Help: <mailto:pearg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/pearg>, <mailto:pearg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Jan 2023 19:54:42 -0000

> On Jan 4, 2023, at 12:05 AM, Stewart Bryant <stewart.bryant@gmail.com> wrote:
> 
> For all end to end communications the routing system needs to know how to deliver the packet. Obscuring the mapping between the address and the location moves the anonymisation problem from the data plane to the routing plane. This makes life 

I wouldn't call it the routing plane, but more like a database control-plane.

> harder for the observer, but I am not sure that it makes it sufficiently hard as to be worth the cost. One advantage of the 

Isn't that the goal? But the cost for the mapping system isn't just for a single benefit. For example, how about maintaining anonymity while roaming?

> topological association of addresses is the intrinsic address aggregation property which both reduces routing traffic overhead and speeds up convergence.

This is true. But punching holes in aggregates and hi-jack attacks are still pervasive.

Dino

v2.23.0 | Report a Bug | By Email