nanog mailing list archives
Re: OpenNTPProject.org
From: Pierre Lamy <pierre () userid org>
Date: Thu, 16 Jan 2014 09:15:39 -0500
BCP38 will only ever get implemented if governments and ruling 'net bodies force deployment. There's otherwise very little benefit seen by the access network providers, since the targets are other orgs and the attacks are happening in a different backyard.
On 14/01/2014 10:36 AM, Paul Ferguson wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 1/13/2014 11:18 PM, Saku Ytti wrote:On (2014-01-13 21:33 +0000), Bjoern A. Zeeb wrote:BCP38! I am always surprised when people need crypto if they fail the simple things.Saying that BCP38 is solution to the reflection attacks is not unlike 5 year old wishing nothing but world peace for christmas, endearing, but it's not going to change anything. BCP38 is completely unrealistic, many access networks are on autopilot, many don't have HW support for BCP38, one port configured has low-benefit, only that machine can stop attacking (but whole world).That does *not* make it an unworthy goal, nor should it stop people from encouraging it's implementation. - - ferg (co-author of BCP38)- -- Paul FergusonPGP Public Key ID: 0x54DC85B2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlLVWXoACgkQKJasdVTchbIrtAD/T2bNNAgZOnnlniBPd6sEquxJ v01mmrhJxFTIDFq7EIkA/3vQbiwtEwBeVyCtc3coEkz50zSDh3j9QQjT+TQWCNVs =Al3Y -----END PGP SIGNATURE-----
Current thread:
- OpenNTPProject.org Jared Mauch (Jan 13)
- Re: OpenNTPProject.org Tony Finch (Jan 14)
- <Possible follow-ups>
- Re: OpenNTPProject.org Derek Andrew (Jan 13)
- Re: OpenNTPProject.org Bjoern A. Zeeb (Jan 13)
- Re: OpenNTPProject.org Saku Ytti (Jan 13)
- Re: OpenNTPProject.org Paul Ferguson (Jan 14)
- Re: OpenNTPProject.org Pierre Lamy (Jan 16)
- Re: OpenNTPProject.org Mark Andrews (Jan 16)
- Re: OpenNTPProject.org Bjoern A. Zeeb (Jan 13)
- Re: OpenNTPProject.org Damian Menscher (Jan 14)
- Re: OpenNTPProject.org Saku Ytti (Jan 14)
- Re: OpenNTPProject.org Dobbins, Roland (Jan 16)
- Re: OpenNTPProject.org Saku Ytti (Jan 16)
- Re: OpenNTPProject.org Dobbins, Roland (Jan 16)
- Re: OpenNTPProject.org Nicolai (Jan 15)
- "trivial" changes to DNS (was: OpenNTPProject.org) Andrew Sullivan (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Christopher Morrow (Jan 16)
- Re: "trivial" changes to DNS (was: OpenNTPProject.org) Andrew Sullivan (Jan 16)