Subject: [Newsclips] IETF SYN-ACK Newspack 2020-06-01

From: "David Goldstein" <[email-masked]>
Date: Mon, 1 Jun 2020 22:22:21 +1000

Hi IETFers,

Welcome to the first edition of the "IETF SYN-ACK Newspack”, a weekly news digest I will be compiling for you on IETF-related issues around the world.

During this test phase I strongly encourage you to give feedback on what you find interesting, and not, and even for suggestions of news sources and topics that you may be aware of but aren’t seeing. Feedback can be given directly to Greg Wood, and to me too if you wish.

This first edition is going to be longer than usual as it covers a few weeks of news and information I’ve compiled. All news items should be freely available, so items behind paywalls normally won’t be included.

As a background, I’ve been compiling a news monitoring service on domain name and related issues, as well as what I call global internet policy issues, since 2002 for a number of domain name registries and related companies, as well as other topics for various clients.

I’m hoping you find this news service both interesting and informative.

Kind regards,

David

**********************

IETF IN THE NEWS

**********************

Is Google Meet actually more secure than Zoom?

Best answer: Google Meet and Zoom are both very secure video chatting apps, with each service offering encryption and other security measures to ensure your data is protected. Neither one is perfect or overwhelmingly better than the other, however, with each having its own pros and cons. ... Any Meet calls that you save to Google Drive are also encrypted, and Google Meet is fully compliant with the Internet Engineering Task Force (IETF) standards for both Datagram Transport Layer Security (DTLS) and Secure Real-time Transport Protocol (SRTP). In other words, Google Meet has all of the certifications you'd want to see in a professional chatting app.

<https://www.androidcentral.com/google-meet-actually-more-secure-zoom>

RangeAmp attacks can take down websites and CDN servers

A team of Chinese academics has found a new way to abuse HTTP packets to amplify web traffic and bring down websites and content delivery networks (CDNs). ... The HTTP Range Requests standard has been under discussion at the Internet Engineering Task Force (IETF) for more than half a decade, but, due to its usefulness, has already been implemented by browsers, servers, and CDNs.

<https://www.zdnet.com/article/rangeamp-attacks-can-take-down-websites-and-cdn-servers/>

Is Open Source the Way Forward for SD-WAN?

The dream of SD-WAN is pretty simple: make networking faster, better, cheaper, and more secure. The problem is proprietary technologies simply can’t scale to meet these aspirations, says Sorell Slaymaker, principal consulting analyst at TechVision Research. ... According to Slaymaker, many of the problems facing the SD-WAN market are born out of the lack of any kind of Internet Engineering Task Force (IETF)-style industry standard.

<https://www.sdxcentral.com/articles/news/is-open-source-the-way-forward-for-sd-wan/2020/05/>

Zoom, Google Meet, Microsoft Teams: The Video Conferencing App Guide

... Google Meet Security Features: Google users have to IETF security standards for Datagram Transport Layer Security (DTLS) and Secure Real-time Transport Protocol (SRTP). Google Meet has a unique encryption key that only exists as long as the meeting runs and it is transmitted in an encrypted and secured RPC (remote procedure call) when the meeting is set up.

<https://www.boomlive.in/coronavirus-outbreak/zoom-google-meet-microsoft-teams-the-video-conferencing-app-guide-8144>

QUIC com compactação na comunicação TLS [QUIC with compression in TLS communication]

Internet Engineering Task Force, aprovou recentemente a extensão de compactação do certificado TLS , uma otimização que promete reduzir o tamanho do handshake TLS compactando sua maior parte.

<https://cryptoid.com.br/ssl-tls/quic-com-compactacao-na-comunicacao-tls/>

Das 108. Treffen finden Ende Juli 2020 online statt [The 108th meeting will take place online at the end of July 2020]

Die Internet Engineering Task Force (IETF), deren 108. Treffen vom 25. bis 31. Juli 2020 in Madrid (Spanien) stattfinden sollte, wird – nach einer am 15. Mai 2020 veröffentlichen Entscheidung – online stattfinden. Das 108. Meeting der Organisation zur Weiterentwicklung des Internet in dem es führende Internetingenieure zusammenbringt startet nun erst am 27. Juli 2020.

<https://domain-recht.de/domain-events/sonstige-events/ietf-das-108-treffen-finden-ende-juli-2020-online-statt-67451.html>

SAN via IP: Was ist IP-Storage? [What is IP Storage]

Das Internet Fibre Channel Protocol (iFCP) stellt Gateway-Funktionen zwischen Fibre Channel und IP zur Verfügung. Es kann beispielsweise IP-Adressen in FC-Adressen übersetzen und abbilden. iFCP ist von der Internet Engineering Task Force (IETF) und ANSI entwickelt und im RFC 4172 beschrieben. Das Protokoll nutzt SCSI und stellt dem Protokoll TCP/IP- anstatt Fibre-Channel-Verbindungen als Verbindungsmedium zur Verfügung. Fibre-Channel-Datenpakete und die SCSI-Daten w

<https://www.storage-insider.de/was-ist-ip-storage-a-904748/>

Missing Link: Vom Siegeszug des Webprotokolls – und resultierenden Problemen [Missing Link: The triumph of the web protocol - and resulting problems]

... Ohne behaupten zu wollen, dass http schon der Spitzenreiter sei, sei es doch sicherlich eines der gängigsten Protokolle, versichert Nottingham. In einem eigenen RFC erklärt der Australier, der seit Oktober 2007 alleine die sogenannte httpBis-Arbeitsgruppe der Internet Engineering Task Force (IETF) geleitet hat, auf was Entwickler zu achten haben, wenn sie neue Anwendungen auf dem "Substrat“ http entwickeln.

<https://www.heise.de/news/Missing-Link-Vom-Siegeszug-des-Webprotokolls-und-resultierenden-Problemen-4768942.html>

谁可以决定互联网的未来？ [Who can decide the future of the Internet?]

日前，曾担任国际互联网协会ISOC、互联网体系结构委员会IAB、互联网工程任务组IETF主席的Brian E.Carpenter教授发表了《谁可以决定互联网的未来》（《Where to Discuss a New Internet？》）一文，回顾了互联网规则制定的过程，分析了相关组织与单位为未来互联网制定规则的可能性。全文如下：

<https://www.edu.cn/info/yc/202005/t20200513_1726882.shtml>

谁在借NEW IP出来作妖？[Who is using the NEW IP to come out as a demon?]

日前，“香港未来网络标准化研究院”和“未来网络国际标准研究通讯编辑部（南京）”投稿著名的察网，发布一篇名为“关于IETF与华为New IP争议的立场声明”。文章以“IETF主席回应New IP的声明”为“靶子”，点名批评IETF——国际互联网工程任务组，声称要表明自己的“立场”与New IP保持“一致性”。该文通过六个小标题，大致谈了以下几个核心观点：标榜自己，称与New IP“立场一致”；质疑IETF，称其“无理之极”；质问国内某组织，称其“与国外利益集团沆瀣一气，打击中国科技发展创新的卖国行径”。

<https://www.edu.cn/info/yc/202005/t20200511_1726403.shtml>

**********************

INTERNET OF THINGS

**********************

Executive Interview: Dr. David Bray, Director, Atlantic Council

... AI Trends: Thank you David for talking to AI Trends today. We will start with the Coronavirus since it’s so topical today, then expand out. What role do you see AI playing in the fight against COVID-19?

<https://techannouncer.com/executive-interview-dr-david-bray-director-atlantic-council/>

3 Ways Every Company Should Prepare For The Internet Of Things

With the global Internet of Things (IoT) market being valued at $164 billion in 2018 – and still rising sharply – it’s no wonder companies want to get in on the IoT act. But what might this entail for the average company? How can your business capitalize on this massive tech trend? Read on to find out.

<https://www.forbes.com/sites/bernardmarr/2020/05/25/3-ways-every-company-should-prepare-for-the-internet-of-things/>

How Can the Internet of Things Improve Lab Research?

Much has been said about using artificial intelligence (AI) to accelerate research in diagnostics or bioinformatics; but this is only a small part of what AI can do for research.

<https://www.technologynetworks.com/informatics/articles/how-can-the-internet-of-things-improve-lab-research-335090>

The Internet of Things can put a bit more of farming in the office

The Internet of Things -IoT- is making inroads in agriculture. We hear the term a lot in discussions on the future of agriculture, but what does it really mean?

<https://www.weeklytimesnow.com.au/news/rural-weekly/opinion/the-internet-of-things-can-put-a-bit-more-of-farming-in-the-office/news-story/8ad5336d077680c6a05d555800e7ab1a>

The rise of the Australian smart city

MORETON BAY Regional Council in South-East Queensland is one of the smart cities that is part of the Global Smart Community and City Alliance (GSC3). In all, some 25 cities formed part of this Alliance, which is no longer active.

<https://independentaustralia.net/business/business-display/the-rise-of-the-australian-smart-city,13913>

**********************

SECURITY & PRIVACY

**********************

Modern crypto standards pave the way to stronger security

Cyberthreats are a ubiquitous concern for organizations operating in the digital world. No company is immune — even large and high-profile organizations like Adobe, Yahoo, LinkedIn, Equifax and others have reported massive data breaches in recent years. Cyberattacks are only growing in frequency, affecting billions of people and threatening businesses.

<https://www.helpnetsecurity.com/2020/05/15/modern-crypto-standards/>

Why network management is a national security issue during the pandemic

The White House and national security officials want more information on how public telecommunications carriers have responded to the pressure from spiking teleworkers' network usage, according to members at a May 13 meeting of the National Security Telecommunications Advisory Council (NSTAC).

<https://fcw.com/articles/2020/05/13/sdn-nstac-white-house-covid.aspx>

NXNSAttack: upgrade resolvers to stop new kind of random subdomain attack

This article describes NXNSAttack, a newly discovered DNS protocol vulnerability that affects all recursive DNS resolvers. It allows for random subdomain attacks to be executed using the DNS delegation mechanism, resulting in a big packet amplification factor.

<https://blog.apnic.net/2020/05/21/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/>

**********************

TLS

**********************

TLS termination, Teams toys – and holy 5G, Batman, Microsoft buys UK network software biz Metaswitch

... Microsoft continued its slapping of Transport Layer Security (TLS) 1.0 and 1.1 last week with a reminder that Azure File Sync would remove support for the outdated protocols in August and that Azure Automation TLS 1.2 enforcement would kick off from 1 September.

<https://www.theregister.co.uk/2020/05/19/round_up/>

Does the QUIC handshake require compression to be fast?

The IETF recently approved the TLS certificate compression extension, an optimization that promises to reduce the size of the Transport Layer Security (TLS) handshake by compressing its largest part.

<https://blog.apnic.net/2020/05/28/does-the-quic-handshake-require-compression-to-be-fast/>

Should you deploy a TLS 1.3 middlebox?

Organizations moving to the TLS 1.3 protocol must decide whether to deploy middleboxes that intercept network traffic for greater visibility, but doing so presents security and regulatory risks.

<https://www.csoonline.com/article/3545480/should-you-deploy-a-tls-13-middlebox.html>

**********************

OTHERWISE NOTEWORTHY

**********************

Announcing the Launch of the Global Encryption Coalition

Today, more than 30 civil society organizations joined in launching the Global Encryption Coalition, to promote and defend encryption in key countries and multilateral gatherings where it is under threat. The new coalition is led by a Steering Committee consisting of the Center for Democracy & Technology (CDT), the Internet Society, and Global Partners Digital.

<https://www.internetsociety.org/blog/2020/05/announcing-the-launch-of-the-global-encryption-coalition/>

ITU leads global efforts to commemorate World Telecommunication and Information Society Day amid COVID-19 pandemic

World Telecommunication and Information Society Day (WTISD) marks the anniversary of the founding of the International Telecommunication Union (ITU) on 17 May 1865, when the first International Telegraph Convention was signed in Paris.

<https://www.itu.int/en/mediacentre/Pages/MA03-2020-World-Telecommunication-and-Information-Society-Day.aspx>

New IP and Emerging Communications Technologies

A "New IP" framework was proposed to an ITU Study Group last year. This framework envisages a resurgence of a network-centric view of communications architectures where application behaviours are moderated by network-managed control mechanisms. It's not the first time that we’ve seen proposals to rethink the basic architecture of the Internet’s technology and it certainly won’t be the last. But is it going to really going to influence the evolution of the Internet? What can we observe about emerging technologies that will play a critical role in the coming years? Here’s my personal selection of recent technical innovations that I would add into the set of emerging technologies that will exercise a massive influence over the coming ten years.

<https://www.potaroo.net/ispcol/2020-05/futuretech.html>

Microsoft working on implementation of modern internet standards

Microsoft is offering users of its Azure Virtual Network a dual-stack IPv4/IPv6 service, with immediate effect. And Office 365 Exchange Online will support DNSSEC and DANE for outgoing mail by the end of the year. Within a further year, the two standards will be supported for incoming mail as well.

<https://www.sidn.nl/en/news-and-blogs/microsoft-working-on-implementation-of-modern-internet-standards>

An Adaptive DiffServ Approach to Support QoS in Network Mobility NEMO Environment [International Journal of Computer Networks & Communications]

Abstract: Network Mobility Basic Support (NEMO BS) protocol (RFC 3963) is an extension of Mobile IPv6. The NEMO BS embraced by IETF working group to permit any node in the portable network to be accessible to the Internet despite the fact the network itself is roaming. This protocol likewise Mobile IPv6 doesn’t deliver any kind of Quality of Service (QoS) guarantees to its clients. It can barely offer the same level of services (i.e. Best-Effort) to all the users without obligation to the application’s needs. This propositions a challenge to real-time applications that demand a precise level of QoS pledge. The Differentiated Services has recently come to be the most widely used QoS support technology in IP networks due to its relative simplicity and scalability benefits. This paper proposes a new scheme to provide QoS to mobile network nodes within NEMO context. The proposed scheme intends to reduce handover latency for the users of MNN as well as alleviates packet losses. The feasibility of the proposed enhancement is assessed by measuring its performance against the native NEMO BS standard protocol using NS-2 simulator. The obtained results in the simulation study have demonstrated that the proposed scheme outperforms the standard NEMO BS protocol.

<https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3577433>

Australian researchers record world’s fastest internet speed from a single optical chip

Researchers from Monash, Swinburne and RMIT universities have successfully tested and recorded Australia’s fastest internet data speed, and that of the world, from a single optical chip – capable of downloading 1000 high definition movies in a split second.

<https://www.swinburne.edu.au/news/latest-news/2020/05/australian-researchers-record-worlds-fastest-internet-speed-from-a-single-optical-chip.php>

<https://www.monash.edu/news/articles/australian-researchers-record-worlds-fastest-internet-speed-from-a-single-optical-chip>

Ultra-dense optical data transmission over standard fibre with a single chip source

Abstract: Micro-combs - optical frequency combs generated by integrated micro-cavity resonators – offer the full potential of their bulk counterparts, but in an integrated footprint. They have enabled breakthroughs in many fields including spectroscopy, microwave photonics, frequency synthesis, optical ranging, quantum sources, metrology and ultrahigh capacity data transmission. Here, by using a powerful class of micro-comb called soliton crystals, we achieve ultra-high data transmission over 75 km of standard optical fibre using a single integrated chip source. We demonstrate a line rate of 44.2 Terabits s−1 using the telecommunications C-band at 1550 nm with a spectral efficiency of 10.4 bits s−1 Hz−1.

<https://www.nature.com/articles/s41467-020-16265-x>

Automation and Human Agency

No matter how fast, cheap, or efficient robots are, they cannot compensate for the human ambition, desire, need, and greed that ultimately drive supply and demand. This has been a key lesson of the pandemic, which has underscored the need to leverage technology to enhance human agency.

<https://www.project-syndicate.org/commentary/covid19-technological-innovation-that-boosts-human-agency-by-sami-mahroum-2020-05>

New IP and Emerging Communications Technologies

A "New IP" framework was proposed to an ITU Study Group last year. This framework envisages a resurgence of a network-centric view of communications architectures where application behaviours are moderated by network-managed control mechanisms. It's not the first time that we’ve seen proposals to rethink the basic architecture of the Internet’s technology and it certainly won’t be the last. But is it going to really going to influence the evolution of the Internet? What can we observe about emerging technologies that will play a critical role in the coming years? Here’s my personal selection of recent technical innovations that I would add into the set of emerging technologies that will exercise a massive influence over the coming ten years.

<https://www.potaroo.net/ispcol/2020-05/futuretech.html>

The Internet Is Resilient Enough to Withstand Coronavirus – But There’s a Catch

Earlier this year, as COVID-19 began to dominate our lives, the world turned to the Internet. This sudden shift to distance learning, working from home, and families sheltering in place drove up online streaming demand, placing additional load on Internet application platforms like Zoom, Netflix, and educational tools such as Kahoot. There was also a dramatic traffic increase across supporting network providers.

<https://www.internetsociety.org/blog/2020/05/the-internet-is-resilient-enough-to-withstand-coronavirus-but-theres-a-catch/>

Where are we in the transition to IPv6? Q&A with Latif Ladid, President of IPv6 Forum

ITU News caught up with Latif Ladid, Senior Researcher at the University of Luxembourg and President of the IPv6 Forum, to gain fresh insight into the status and importance of the transition from IPv4 to its successor Internet Protocol, IPv6.

<https://news.itu.int/where-are-we-in-the-transition-to-ipv6/>

What is the China Standards 2035 Plan and How Will it Impact Emerging Industries?

China is set to release an ambitious plan to write global standards for the next generation of technology, a move that could have enormous implications for tech industries worldwide.

<https://www.china-briefing.com/news/what-is-china-standards-2035-plan-how-will-it-impact-emerging-technologies-what-is-link-made-in-china-2025-goals/>

What Do DDT and Computing Have in Common?

... DDT and computing both have amazing benefits, but now that I've got your attention, my point is they also both have significant negatives. And, their good doesn't offset their bad. So, in addition to reaping computing's bounty (education, information access, entertainment, commerce, efficiency, and more), we should "own" and work to reduce the negative impacts of computing.

<https://cacm.acm.org/magazines/2020/6/245144-what-do-ddt-and-computing-have-in-common/fulltext>

Implications of the COVID-19 Pandemic by Vinton G. Cerf

... Computing has a lot to offer, not least is what I will call "computational-x" for many values of "x." Biology, astronomy, physics, linguistics, chemistry, and cosmology are all changed and in some ways enhanced by the prefix. With sufficient computing power and the use of new tools such as machine learning (ML) for deep, multilayer neural networks, we are able to analyze data effectively in ways not feasible earlier. 

<https://cacm.acm.org/magazines/2020/6/245146-implications-of-the-covid-19-pandemic/fulltext>

Technology Adoption by Peter J. Denning, Ted G. Lewis

... When we develop new technology, we would dearly like to predict its future adoption. For most technologies, total adoptions follow an S curve that features exponential growth in number of adopters to an inflection point, and then exponential flattening to market saturation. Is there any way to predict the S curve, given initial data on sales?

<https://cacm.acm.org/magazines/2020/6/245155-technology-adoption/fulltext>

Central African Peering Forum: A Defining Moment for Peering and Interconnection

The first-ever Central African Peering Forum comes at a defining moment for Internet peering and interconnection. In the midst of the COVID-19 pandemic, countries have implemented measures to restrict people from moving from their homes, while only allowing essential movements and services.

<https://www.internetsociety.org/blog/2020/05/central-african-peering-forum-a-defining-moment-for-peering-and-interconnection/>

Mozilla goes full incubator with ‘Fix The Internet’ startup lab and early-stage investments

After testing the waters this spring with its incubator-esque MVP Lab, Mozilla is doubling down on the effort with a formal program dangling $75,000 investments in front of early-stage companies. The focus on “a better society” and the company’s open-source clout should help differentiate it from the other options out there.

<https://techcrunch.com/2020/05/14/mozilla-goes-full-incubator-with-fix-the-internet-startup-lab-and-early-stage-investments/>

COVID-19 and the Value of Internet Openness: The European experience — by Frode Sørensen

This essay describes the impact the COVID-19 breakout has had on the European internet traffic evolution and network capacity, the application of the European Open Internet Regulation, and preventive measures taken by stakeholders after the breakout. Overall, European internet infrastructure has coped well with the situation despite significant increase in internet traffic load.

<https://www.medianama.com/2020/05/223-covid19-value-of-internet-openness-european-experience/>

-----------

email:  <mailto:[email-masked]> [email-masked]

web:  <http://goldsteinreport.com/> http://goldsteinreport.com

Twitter:  <https://twitter.com/goldsteinreport> https://twitter.com/goldsteinreport

LinkedIn:  <https://www.linkedin.com/in/davidmgoldstein> https://www.linkedin.com/in/davidmgoldstein

phone: +61 418 228 605 - mobile