Re: [VIPR] VIPR privacy issue

[Marc Petit-Huguenin <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 01/26/2012 01:28 PM, Dean Willis wrote:
> 
> On Jan 26, 2012, at 10:40 AM, Richard L. Barnes wrote:
>> 
>> 
>> Like I said, the mitigation here is the same as any situation where you
>> want to hide your IP address: Send packets from a different network.
> 
> 
> So we should run a great big VPN in order to run RELOAD in order to run
> ViPR?
> 
> Great! Now all we need is a peer-to-peer VPN capable of obscuring the IP
> addresses being used.
> 
> I'm trying to imagine just how badly the universe would break if one tried
> to run RELOAD over TOR. I don't think I have that good an imagination,
> because scenes from the movie "2012" pale by comparison, and I'm sure the
> real situation would be far worse than what I imagine.
> 
> But this does all come back to why I haven't been able to convince myself
> of the real-world utility of ViPR. We're layering vast complexity onto what
> is basically a distributed  trust-anchor problem, where the easiest thing
> to do in the real-world is to have a centralized anchor (which might itself
> refer to the PSTN basis anchor).
> 
> How about an alt-root DDNS/ENUM server that itself uses PSTN reachability
> to verify registrations submitted via DDNS?

That may be worth investigating, but the first thing that the WG should
answer, IMHO, is do we want to 1) give up, 2) delay for RELOAD, or 3) replace
RELOAD?

- -- 
Marc Petit-Huguenin
Personal email: [e-mail]
Professional email: [e-mail]
Blog: http://blog.marc.petit-huguenin.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=OqpG
-----END PGP SIGNATURE-----