Subject: [Newsclips] IETF SYN-ACK Newspack 2021-08-16

From: "David Goldstein" <[email-masked]>
Date: Mon, 16 Aug 2021 15:04:40 +1000

The IETF SYN-ACK Newspack collects IETF-related items from a variety of news outlets and other online publications. They do not represent the views of the IETF and are not checked for factual accuracy.

**********************

IETF IN THE NEWS

**********************

Some not-DNS Topics at IETF 111 by Geoff Huston

I’ve already scribed my thoughts on the DNS-related topics that were discussed at the July 2021 IETF 111 meeting. It may be surprising to the DNSphiles out there but there really are other topics that are discussed at IETF meetings not directly related to the DNS! These are some notes I took on the topic of current activities in some of the active IETF areas that are not DNS topics.

< <https://www.potaroo.net/ispcol/2021-08/ietf111-notdns.html> https://www.potaroo.net/ispcol/2021-08/ietf111-notdns.html>

What the U.S. Competition and Innovation Act Gets Right About Standards

International technical standards set the foundation for the billions of digital devices that people worldwide rely on. The standards ensure that mobile devices produced in China can connect to Swedish telecommunications networks and run apps developed in Brazil. Concerns from members of Congress, independent commissions, and observers about China’s influence in the bodies that propose, debate, and adopt technical standards have elevated these venues from wonky, technical arenas that received little public attention to fora deserving of international attention. Think tanks, State Department leaders, and even the Group of 7 are turning their attention to technical standards as crucial elements of geopolitical competition and technology engagement abroad. ... The three largest international SSBs [standards-setting bodies] are the International Organization for Standardization (ISO), the International Electrotechnical Commission (IEC) and the International Telecommunication Union (ITU). Other SSBs such as the 3rd Generation Partnership Project (3GPP) or the Internet Engineering Task Force (IETF) are smaller organizations that propose technical specifications or oversee standards development for specific areas, like, in this case, 5G telecommunications and the internet, respectively. The ITU is a multilateral SSB (composed of states), while the ISO, IEC, 3GPP, and IETF are multistakeholder SSBs (composed of government representatives, companies, subject matter experts, civil society participants and the like). Each body has its unique structure, but SSBs and their technical committees, subcommittees, and working groups are generally led by secretariats, chairs, and vice chairs. In general, standards bodies are driven by consensus, and international standards are voluntary in nature.

< <https://www.lawfareblog.com/what-us-competition-and-innovation-act-gets-right-about-standards> https://www.lawfareblog.com/what-us-competition-and-innovation-act-gets-right-about-standards>

A Second-Generation of Cloud-Based Video Surveillance Services

... Sean Chang is the Co-Founder, President and also serves as the Chief Executive Officer of Rasilient Systems.Sean Chang is the Co-Founder, President and also serves as the Chief Executive Officer of Rasilient Systems.About the author: Sean Chang is the Co-Founder, President and also serves as the Chief Executive Officer of Rasilient Systems. Before starting Rasilient, Sean worked at Lucent, HP, HP Labs, and several startups. His career centers on video and Internet technologies. While at HP and HP Lab, he worked on video on demand and associated MPEG Transport technologies. He also led the development of the LMDS broadband wireless system in Lucent. While at MCNC, he participated in the IETF Video Conferencing work Group, which led to RTSP and SIP protocols.

< <https://www.securityinfowatch.com/video-surveillance/article/21230385/a-secondgeneration-of-cloudbased-video-surveillance-services> https://www.securityinfowatch.com/video-surveillance/article/21230385/a-secondgeneration-of-cloudbased-video-surveillance-services>

Is Google adjusting the FLoC strategy?; Friday’s daily brief

... This may be a response to evidence that the previous method of FLoC (which did not pass muster with GDPR) might enable fingerprinting, which means bad actors could still track individuals — something FLoC is expressly created to prohibit. “Topics have a number of advantages over cohorts. Users can see what’s being said about them and understand it,” said Josh Karlin, a tech lead manager of Google’s Privacy Sandbox team in its Chrome browser division at an Internet Engineering Task Force meeting.

< <https://searchengineland.com/is-google-adjusting-the-floc-strategy-fridays-daily-brief-351218> https://searchengineland.com/is-google-adjusting-the-floc-strategy-fridays-daily-brief-351218>

Google considers switching FLoC to a topic-based approach, as exec acknowledges cookie replacement has fingerprinting potential

Now that Google has postponed its plan to disable third-party cookies in its Chrome browser, the digital ad giant may be considering a transition away from the cohort-based ad targeting approach to a cookieless system oriented around topics.

< <https://digiday.com/marketing/google-switch-floc-cookie-replacement-fingerprinting-potential/> https://digiday.com/marketing/google-switch-floc-cookie-replacement-fingerprinting-potential/>

The Go and Rust “net” Library Was Affected by a Critical IP Address Validation Vulnerability

... It seems that parts of an IPv4 address can be interpreted as octal if prefixed with a “0”, as explained in an IETF draft, therefore the rules around how a mixed-format IPv4 address should be parsed vary between applications.

< <https://heimdalsecurity.com/blog/the-go-and-rust-net-library-was-affected-by-a-critical-ip-address-validation-vulnerability/> https://heimdalsecurity.com/blog/the-go-and-rust-net-library-was-affected-by-a-critical-ip-address-validation-vulnerability/>

Google reagiert auf Datenschutz-Bedenken: Entwickler schlägt Themen-IDs für FLoC vor [Google responds to privacy concerns: Developer suggests topic IDs for FLoC]

... Josh Karlin, ein leitender Entwickler der Google Privacy Sandbox spricht laut Digiday nun von einer möglichen Anpassung: Anstatt mithilfe von undurchsichtigen und numerischen Kohorten-IDs zu arbeiten, sollen Websites und Personen Themenkategorien zugeordnet werden. In einem Meeting der Internet Engineering Task Force vom 30. Juli 2021 erklärte er, wie das funktionieren könnte: Ein Algorithmus generiert themenbezogene IDs wie „Fitness“ oder „darstellende Kunst“ und weist diese den Websites oder Personen zu. Die numerischen IDs seien „schwer auszudrücken und schwer zu verstehen“. Karlin erwähnt auch ein Opt-in oder Opt-out für Themen, sodass Nutzer:innen sich selbst zuordnen könnten. Laut Karlin ist aber noch nichts beschlossen.

< <https://t3n.de/news/google-floc-topic-ids-datenschutz-1398100/> https://t3n.de/news/google-floc-topic-ids-datenschutz-1398100/>

Le FLoC de Google commence à faire flop [Google's FLoC starts to flop]

... Si Sébastien Ménard, en tant qu’employé de Qwant est juge et partie, ses craintes semblent justifiées. Josh Karlin, la responsable technique de Privacy Sandbox qui a pris la parole en juillet à l’Internet Engineering Task Force a reconnu que « FLoC ajoute une nouvelle surface d'empreintes numérique ». Selon le site Digiday des fournisseurs de technologie d’identité « s'attendaient à utiliser les identifiants de cohorte pour améliorer la précision des systèmes qui détectent l'identité des personnes ». Indice loin d’être anodin : FLoC n’est pas testé en Europe : Google craint que son système ne soit pas conforme au RGPD.

< <https://siecledigital.fr/2021/08/12/google-cookies-tiers-floc/> https://siecledigital.fr/2021/08/12/google-cookies-tiers-floc/>

Google sopesa evolucionar FLoC a segmentación temática por riesgos de seguimiento inadecuado en las cohortes [Google considers evolving FLoC to thematic segmentation due to risks of inadequate monitoring in cohorts]

La alternativa de Google para reemplazar las cookies de terceros ha sido señalada desde diferentes ámbitos como un riesgo aún mayor de privacidad, especialmente por las opciones que abre al fingerprinting. Y esa circunstancia puede hacer que FLoC no salga adelante tal y como estaba previsto, identificando a usuarios y agrupándolos en cohortes, sino asignándoles temas a las webs que visitan. Josh Karlin, jefe de equipo de la Zona de Pruebas de Privacidad de Google, habló de ello en un evento que la organización de estándares abiertos The Internet Engineering Task Force organizó a finales de julio y que ha sido referenciado por Digiday.

< <https://dircomfidencial.com/marketing-digital/google-sopesa-evolucionar-floc-a-segmentacion-por-temas-por-riesgos-de-seguimiento-inadecuado-en-las-cohortes-20210812-0404/> https://dircomfidencial.com/marketing-digital/google-sopesa-evolucionar-floc-a-segmentacion-por-temas-por-riesgos-de-seguimiento-inadecuado-en-las-cohortes-20210812-0404/>

如何实现H.264的实时传输？ [How to realize the real-time transmission of H.264?]

实时视频系统中的媒体传输，绝大多数都会采用RTP（实时传输协议）标准。H.264视频作为当前应用最广泛的视频编码标准，其传输协议也会首选RTP标准。在设计实现H.264的实时传输时，H.264协议基于RTP的打包和解包定义于IETF标准-RFC6184，RTC系统需要遵循这个标准来设计打包和解包处理模块。在通信理论中，这个过程可以被认为是基于传输的信道编码。本篇技术文章带你了解H.264在RTP中的基本格式和技术实践。

< <https://www.sohu.com/a/482954880_121040280> https://www.sohu.com/a/482954880_121040280>

腾讯网启用“QQ.中国” 中文域名越来越流行 [Tencent launches "QQ.中国" Chinese domain name more and more popular]

... 互联网名称与数字地址分配机构（ICANN）ccNSO理事、国际互联网工程任务组（IETF）EXTRA工作组联合主席姚健康博士认为，中文域名是用中文开启互联网的钥匙，非常适合国人使用。从文化角度来讲，中文域名是在互联网上重要的文化标识，有利于传承和弘扬中国文化。从安全角度来讲，“.中国”顶级域名是我国在互联网上的中文国家顶级域名，由我国全权管理，安全有保障。从技术角度来讲，中文域名技术符合IETF国际技术标准，全球畅通。姚健康说，“ICANN将中文域名及其它多语种域名的推广应用作为今后几年重点推动的工作，可以说中文域名前景十分广阔。”

< <https://finance.sina.com.cn/tech/2021-08-11/doc-ikqcfncc2255939.shtml> https://finance.sina.com.cn/tech/2021-08-11/doc-ikqcfncc2255939.shtml>

40亿地址马上要逼近极限——互联网创始人访问清华大学 [4 billion addresses are about to approach the limit-Internet founders visit Tsinghua University]

... 美国是第一个做出回应的。它意识到为了在IT领域保持竞争优势，必须设计新一代的IP协议。因此，从1992年到1997年，IETF经历了不断的试错、修正、组合。在全世界研究人员的共同努力下，IPv6协议终于被证实——它有2的128次方地址，相当于地球上的地址。每平方米可以得到地址的 10 的 26 次方。

< <http://www.yunkeji.com/article/13931.html> http://www.yunkeji.com/article/13931.html>

“데이터 생태계에 AI 적용, 표준 협력 절실” [“Applying AI to the data ecosystem, the need for standard cooperation”]

... 아울러 “TTA는 글로벌 표준화 기구인 ITU-T, ISO/IEC JTC1, W3C, IETF, MPAI 등에서 국내 산학연이 개발한 AI-데이터 관련 핵심 기술을 선제적으로 국제표준으로 반영하기 위한 대응 방안을 마련하고 향후 전개될 데이터 생태계와 AI 기술을 적용하는 지능형 응용 및 서비스를 지원할 고신뢰 AI-데이터 인프라를 위한 표준화 활동 지원을 강화하겠다”고 밝혔다.

< <https://www.koit.co.kr/news/articleView.html?idxno=87706> https://www.koit.co.kr/news/articleView.html?idxno=87706>

‘고신뢰 AI·데이터 글로벌 표준화 대응’…TTA, 11일 워크숍 ['High-reliability AI and data global standardization response'... TTA, 11-Day Workshop]

... 이어 “TTA는 글로벌 표준화 기구인 ITU-T, ISO/IEC JTC1, W3C, IETF, MPAI 등에서 국내 산학연이 개발한 AI-데이터 관련 핵심 기술을 선제적으로 국제표준으로 반영하기 위한 대응 방안을 마련하고 AI 기술을 적용하는 지능형 응용 서비스를 지원할 고신뢰 AI-데이터 인프라를 위한 표준화 활동 지원을 강화하겠다”고 부연했다.

< <https://www.edaily.co.kr/news/read?newsId=02430486629146008&mediaCodeNo=257> https://www.edaily.co.kr/news/read?newsId=02430486629146008&mediaCodeNo=257>

**********************

INTERNET OF THINGS

**********************

Canada Is Gathering Public Input on Copyright Implications of AI, Internet of Things

In the Byzantine world of copyright law, Barry Sookman is arguably Canada’s top expert in tracking developments and forecasting changes needed to keep its legislation abreast of evolving technology.

< <https://www.cigionline.org/articles/canada-is-gathering-public-input-on-copyright-implications-of-ai-internet-of-things/> https://www.cigionline.org/articles/canada-is-gathering-public-input-on-copyright-implications-of-ai-internet-of-things/>

Digital is the future of urban energy

Cities already account for two-thirds of energy consumption and produce more than 70 per cent of carbon emissions globally every year. With more than half of all people in the world living in cities, smart urban energy systems are needed to bring climate-damaging emissions down to net-zero in the next few decades.

< <https://www.itu.int/en/myitu/News/2021/08/10/14/08/Digital-future-urban-energy-IEA-report> https://www.itu.int/en/myitu/News/2021/08/10/14/08/Digital-future-urban-energy-IEA-report>

The Internet of Things Is a Lot More Than Just Sensors

The Internet of Things (IoT) includes a diverse set of connected systems working in perfect harmony. Several people may incorrectly define IoT technology as nothing more than a series of sensors linked by communication devices. The tendency to view IoT in a unidimensional way is detrimental to understanding the working of such an incredible concept.

< <https://www.bbntimes.com/science/the-internet-of-things-is-a-lot-more-than-just-sensors> https://www.bbntimes.com/science/the-internet-of-things-is-a-lot-more-than-just-sensors>

The internet of things: a ‘must have’ in every segment

Having worked in the fields of machinery and logistics for many years, Stefan Schweiger of IT systems house Bechtle first became familiar with the internet of things in 2017, on a project that transformed a ‘product company’ to a ‘digital service supplier’ following the installation of IoT sensors in each product. “I saw the transparency that IoT can supply and the huge potential of this technology for business,” says Schweiger. “Since then, IoT technology has evolved even more, and it will change a lot of industries. IoT will become a commodity and a ‘must have’ in every segment and if you think about artificial intelligence, machine learning and blockchain, you need to think about IoT as well.”

< <https://www.technologyrecord.com/Article/the-internet-of-things-a-must-have-in-every-segment-125308> https://www.technologyrecord.com/Article/the-internet-of-things-a-must-have-in-every-segment-125308>

< <https://www.technologyrecord.com/digital/magazine/issue21/index.html> https://www.technologyrecord.com/digital/magazine/issue21/index.html>

Improving sustainability with intelligent transportation

As cities look to find greener solutions to transport, a coordinated mixed-mode mobility system driven by the careful use of data may provide the answer

< <https://www.technologyrecord.com/Article/improving-sustainability-with-intelligent-transportation-125127> https://www.technologyrecord.com/Article/improving-sustainability-with-intelligent-transportation-125127>

**********************

NEW TRANSPORT PROTOCOLS

**********************

Microsoft emits last preview of .NET 6 and C# 10, but is C# becoming as complex as C++?

... ASP.NET Core has a bunch of new features including HTTP/3 or QUIC support in Kestrel, the built-in .NET web server, and new support in Blazor (.NET that runs in the browser) for streaming data from JavaScript to .NET.

< <https://www.theregister.com/2021/08/12/dotnet_6_preview_7/> https://www.theregister.com/2021/08/12/dotnet_6_preview_7/>

HTTP/3: Wir erklären die nächste Version des Hypertext Transfer Protocols [HTTP/3: We explain the next version of the Hypertext Transfer Protocol]

... Google arbeitet daher schon seit 2012 an einer Alternative unter dem Namen QUIC. Die Technik wurde ein Jahr später offiziell vorgestellt und zunächst für die interne Kommunikation zwischen Google-Servern genutzt und später auch von Facebook eingesetzt. QUIC setzt nicht mehr auf das verbindungsorientierte TCP, sondern auf das verbindungslose User Datagram Protocol (UDP). UDP verzichtet beim Datentransport auf den Aufbau explizierter Verbindungen und benötigt keine Quittierung des Dateneingangs. Eventuell benötigte Fehlerkorrekturen geschehen auf QUIC-Ebene und am Ende wird dadurch die Paketzahl reduziert, was zu einer deutlichen Beschleunigung führt. Die für die Standardisierung von Internet-Übertragungsprotokollen zuständige Internet Engineering Taskforce (IETF) einigte sich später darauf, QUIC als Grundlage für HTTP/3 zu nutzen.

< <https://t3n.de/news/http3-erklaert-hyper-text-transport-protocol-1398125/> https://t3n.de/news/http3-erklaert-hyper-text-transport-protocol-1398125/>

Entre los cambios de la última 'preview' de .NET 6 y C# 10 se incluyen versiones preliminares de las API de .NET 7 [Changes in the latest .NET 6 and C # 10 preview include prerelease versions of the .NET 7 APIs]

... Otro de los componentes de este framework, ASP.NET Core, también llegará con diversas nuevas características bajo el brazo: Compatibilidad con HTTP/3 o QUIC en Kestrel (el servidor web .NET integrado).

< <https://www.genbeta.com/desarrollo/cambios-ultima-preview-net-6-c-10-se-incluyen-versiones-preliminares-api-net-7> https://www.genbeta.com/desarrollo/cambios-ultima-preview-net-6-c-10-se-incluyen-versiones-preliminares-api-net-7>

**********************

OTHERWISE NOTEWORTHY

**********************

us: Staff Spotlight: NIST’s Human Factors Scientist

For years, NIST has been conducting research in the areas of human-centered design and evaluation, usable cybersecurity, public safety communication technology, augmented-reality usability, biometrics usability, human factors, and cognitive engineering. We asked Yee-Yin Choong, a Human Factors Scientist in the Visualization and Usability Group, Information Technology Laboratory at NIST about her research and experience working in this unique field.

< <https://www.nist.gov/blogs/cybersecurity-insights/staff-spotlight-nists-human-factors-scientist> https://www.nist.gov/blogs/cybersecurity-insights/staff-spotlight-nists-human-factors-scientist>

What’s ‘interop testing’ and why is it so tricky?

Have you tried pairing your bluetooth phone with your smart car recently? How did that go? Usually it works fine, but sometimes it’s a bit of a chore, right? You have to go into your phone settings and figure out whether the problem is there or with your car; maybe some firmware needs updating, or maybe something’s just broken or incompatible. You don’t always know. This is a taste of what ‘interop testing’ feels like, as well as an example of why it needs to be done.

< <https://blog.apnic.net/2021/08/12/whats-interop-testing-and-why-is-it-so-tricky/> https://blog.apnic.net/2021/08/12/whats-interop-testing-and-why-is-it-so-tricky/>

It's time to decentralize the internet, again: What was distributed is now centralized by Google, Facebook, etc

Systems Approach Anyone who studies internet technology quickly learns about the importance of distributed algorithms to its design and operation. Routing protocols are an obvious example of such algorithms.

< <https://www.theregister.com/2021/08/11/decentralized_internet/> https://www.theregister.com/2021/08/11/decentralized_internet/>

------

David Goldstein

email:  <mailto:[email-masked]> [email-masked]

web:  <http://goldsteinreport.com/> http://goldsteinreport.com/

Twitter:  <https://twitter.com/goldsteinreport> https://twitter.com/goldsteinreport

phone: +61 418 228 605 - mobile; +61 2 9663 3430 - office/home