nanog mailing list archives
RE: How do you put a TV station on the Mbone?
From: George Bonser <gbonser () seven com>
Date: Wed, 4 May 2011 22:55:54 -0700
There is a security aspect to such things, though, as how do you
know
the content is from a trusted source? That is the bugaboo with multicast. It needs to be information that isn't going to hurtanythingif it is bogus. Also, it opens up a DoS possibility with noisetrafficsent to the multicast group.SSM with encryption?
Well, certainly, but source address can be very easily spoofed with a UDP multicast stream. Now that could be mitigated with a lot of network configuration rules but something is needed that just works without all that. So using multicast for things like software updates to computers over the general internet to the general public probably isn't going to work. Encryption is also an issue because it doesn't really work well over multicast. How do I encrypt something in a way that anyone can decrypt but nobody can duplicate? If I have a separate stream per user, that is easy. If I have one stream for all users, that is harder. The answer is probably in some sort of digital signature but not really encryption. Using public/private key encryption over multicast, I would have to distribute the private key so others could decrypt the content. If they have the private key, they can generate a public key to use to generate content. Encryption is probably overkill anyway. What is needed is a mechanism simply to say that the content is certified to have come from the source it claims to come from. So ... basically ... better not to use multicast for anything you really might have any security issues with. Fine for broadcasting a video, not so fine for a kernel update.
Current thread:
- Re: How do you put a TV station on the Mbone?, (continued)
- Re: How do you put a TV station on the Mbone? Steven Bellovin (May 04)
- Re: How do you put a TV station on the Mbone? Jay Ashworth (May 04)
- Re: How do you put a TV station on the Mbone? Daniel Staal (May 04)
- Re: How do you put a TV station on the Mbone? Jay Ashworth (May 04)
- Re: How do you put a TV station on the Mbone? Tim Durack (May 04)
- Re: How do you put a TV station on the Mbone? Jay Ashworth (May 04)
- Re: How do you put a TV station on the Mbone? Tim Durack (May 11)
- Re: How do you put a TV station on the Mbone? Michael Painter (May 11)
- RE: How do you put a TV station on the Mbone? George Bonser (May 04)
- RE: How do you put a TV station on the Mbone? Antonio Querubin (May 04)
- RE: How do you put a TV station on the Mbone? George Bonser (May 04)
- Re: How do you put a TV station on the Mbone? Jeff Wheeler (May 04)
- Re: How do you put a TV station on the Mbone? Jay Ashworth (May 05)
- Re: How do you put a TV station on the Mbone? Chris Adams (May 05)
- Re: How do you put a TV station on the Mbone? Steven Bellovin (May 05)
- Re: How do you put a TV station on the Mbone? Jay Ashworth (May 05)
- RE: How do you put a TV station on the Mbone? Antonio Querubin (May 05)
- Re: How do you put a TV station on the Mbone? Jay Ashworth (May 05)
- Re: How do you put a TV station on the Mbone? Scott Helms (May 04)
- Re: How do you put a TV station on the Mbone? Jeff Young (May 04)
- Re: How do you put a TV station on the Mbone? LorĂ¡nd Jakab (May 05)