Subject: [Newsclips] IETF SYN-ACK Newspack 2022-01-24

From: "David Goldstein" <[email-masked]>
Date: Mon, 24 Jan 2022 15:58:23 +1100

The IETF SYN-ACK Newspack collects IETF-related items from a variety of news outlets and other online publications. They do not represent the views of the IETF and are not checked for factual accuracy.

**********************

IETF IN THE NEWS

**********************

IP addressing in 2021

Time for another annual roundup from the world of IP addresses. Let’s see what has changed in the past 12 months in addressing the Internet and look at how IP address allocation information can inform us on the changing nature of the network itself. Back around 1992, the IETF gazed into their crystal ball and tried to understand how the Internet was going to evolve and what demands that evolution would place on the addressing system as part of the ‘IP Next Generation’ study.

< <https://www.potaroo.net/ispcol/2022-01/addr2021.html> https://www.potaroo.net/ispcol/2022-01/addr2021.html>

< <https://blog.apnic.net/2022/01/19/ip-addressing-in-2021/> https://blog.apnic.net/2022/01/19/ip-addressing-in-2021/>

DNS vulnerability, configuration errors can cause DDoS

The DNS is one of the core services of the Internet. Every web page visit requires multiple DNS queries and responses. When it breaks, the DNS ends up on front pages of prominent news sites. ... In response to this, we’ve written an Internet draft for the IETF DNS Working Group detailing how to fix it and developed CycleHunter, a tool that can prevent such attacks. Further to this, we’ve carried out responsible disclosure, working with Google and Cisco engineers who mitigated the issue on their public DNS servers.

< <https://blog.apnic.net/2022/01/20/dns-vulnerability-configuration-errors-can-cause-ddos/> https://blog.apnic.net/2022/01/20/dns-vulnerability-configuration-errors-can-cause-ddos/>

Authentifizierbare Zeitserver jetzt auch in der Schweiz verfügbar [Authenticable time servers now also available in Switzerland]

Gleich drei öffentliche, sichere Zeitserver gibt es seit Jahreswechsel in der Schweiz. Zeitserver sorgen dafür, dass an alle verbundenen Rechner und Geräte im Netzwerk eine exakte Uhrzeit übertragen wird und sie sich darauf synchronisieren.

< <https://www.heise.de/news/Authentifizierbare-Zeitserver-jetzt-auch-in-der-Schweiz-verfuegbar-6330868.html> https://www.heise.de/news/Authentifizierbare-Zeitserver-jetzt-auch-in-der-Schweiz-verfuegbar-6330868.html>

南方电网 x 华为：建成南网首张“变电智能专网”！[China Southern Power Grid x Huawei: Built the first "substation intelligent private network" of China Southern Grid!]

... 作为互联网工程任务组（IETF）设计的用于替代IPv4的下一代IP协议，IPv6号称可以为地球上的每一粒沙子编上地址。基于IPv6这项强大的功能，IPv6架构上每一个设备都有唯一的IP地址。

< <http://www.pjtime.com/2022/1/262455196912.shtml> http://www.pjtime.com/2022/1/262455196912.shtml>

重塑互联网之“根”：下一代DNS，域名系统赛道的中国路径 [Reinventing the "Roots" of the Internet: The Next Generation of DNS, the Chinese Path to the Domain Name System Track]

... 下一代DNS承载了构建网络空间命运共同体（Domain）、掌握网络关键基础资源（Name）、筑牢网络核心技术（System）三大使命。对此毛伟给出了具体路径：网络空间领域，在互联网码号资源公钥基础设施（RPKI）国际标准建设、多语种域名（IDN）技术实现等关键领域持续引领；广泛参与域名系统生态国际组织（ICANN、IETF）的社群工作，做到“有贡献、有声音、有地位”。关键基础资源领域，通过行业标准制定、构建技术运行平台、提供专业服务等手段，引导企业把握资源分配的历史契机，掌握更多关键基础资源。而在软硬件系统方面，以自主可控技术持续满足数字经济最前沿需求，拓展更多行业、场景下的解决方案，充分发挥基础软件的底层支撑价值。

< <https://iot.ofweek.com/2022-01/ART-132209-8420-30546962.html> https://iot.ofweek.com/2022-01/ART-132209-8420-30546962.html>

中国联通召开IPv6+创新实践暨规模部署推进会 [China Unicom held an IPv6+ innovation practice and scale deployment promotion meeting]

... IETF互联网架构委员会（IAB）委员、华为首席IP协议专家李振斌在会上指出，华为坚持以“IPv6+”为核心技术打造下一代互联网解决方案，与中国联通持续开展网络技术创新深度合作，共同推进“IPv6+”网络演进，打造新型数字信息基础设施。

< <http://it.enorth.com.cn/system/2022/01/23/052281427.shtml> http://it.enorth.com.cn/system/2022/01/23/052281427.shtml>

**********************

NEWS FROM IETF PARTICIPANTS

**********************

eu: Antitrust: Commission publishes final report on consumer Internet of Things sector inquiry

The European Commission has published today the findings of its competition sector inquiry into the consumer Internet of Things (IoT). The final report and its accompanying staff working document identify potential competition concerns in the rapidly growing markets for IoT related products and services in the European Union.

< <https://ec.europa.eu/commission/presscorner/detail/en/ip_22_402> https://ec.europa.eu/commission/presscorner/detail/en/ip_22_402>

**********************

SECURITY & PRIVACY

**********************

Observations on Resolver Behavior During DNS Outages

When an outage affects a component of the internet infrastructure, there can often be downstream ripple effects affecting other components or services, either directly or indirectly. We would like to share our observations of this impact in the case of two recent such outages, measured at various levels of the DNS hierarchy, and discuss the resultant increase in query volume due to the behavior of recursive resolvers.

< <https://blog.verisign.com/security/facebook-dns-outage/> https://blog.verisign.com/security/facebook-dns-outage/>

What you need to know about cybersecurity in 2022

Digitalization has increased during the COVID-19 pandemic. The global use of services such as video conferencing has grown tenfold. As the use of digital tools increases, so does the amount of data created. The World Bank estimates that, by 2022, annual total internet traffic will increase by about 50% from 2020 levels, reaching 4.8 zettabytes. If you were to store 4.8 zettabytes on DVDs, your stack of DVDs would be long enough to circle the Earth six times.

< <https://www.weforum.org/agenda/2022/01/cyber-security-2022-global-outlook/> https://www.weforum.org/agenda/2022/01/cyber-security-2022-global-outlook/>

We Need to Encrypt DNS: Here’s Another Compelling Reason Why

In 1983, when the Domain Name System, or DNS was invented, the world was a very different place. I had a full head of hair and a thick mustache, which at the time seemed like the height of coolness. But I digress.

< <https://www.akamai.com/blog/security/we-need-to-encrypt-dns-heres-another-compelling-reason-why> https://www.akamai.com/blog/security/we-need-to-encrypt-dns-heres-another-compelling-reason-why>

Investigating hidden root certificates in the wild

HTTPS serves as a critical infrastructure for web security, protecting the privacy and integrity of communications between networks. An important aspect of the extension is the authentication process, which is powered by Web PKI via digital certificates that are issued by Certificate Authorities (CAs).

< <https://blog.apnic.net/2022/01/21/investigating-hidden-root-certificates-in-the-wild/> https://blog.apnic.net/2022/01/21/investigating-hidden-root-certificates-in-the-wild/>

Cybersecurity market to reach $346 billion by 2027

As per the study of Astute Analytica, the global cybersecurity market is anticipated to grow at a CAGR of 13.40% during the forecast period of 2021 to 2027. The market marked a revenue of $162.9 Bn in the year 2021 and is estimated to reach $346 Bn by the end of the year 2027, with around 2.4 times of growth over the study period.

< <https://www.helpnetsecurity.com/2022/01/21/cybersecurity-market-2027/> https://www.helpnetsecurity.com/2022/01/21/cybersecurity-market-2027/>

Take 'Urgent' Steps to Secure Systems From Damaging Attacks, CISA Says

The US Department of Homeland Security's Cybersecurity & Infrastructure Security Agency (CISA) today published a bulletin for senior leaders of US organizations to "immediately implement" a list of specific security steps.

< <https://www.darkreading.com/threat-intelligence/take-urgent-steps-to-secure-systems-from-damaging-attacks-cisa-says> https://www.darkreading.com/threat-intelligence/take-urgent-steps-to-secure-systems-from-damaging-attacks-cisa-says>

The race towards renewable energy is creating new cybersecurity risks

The shift to renewable energy is bringing benefits - but there's potential risks of security vulnerabilities in everything from industrial systems to IoT smart meters.

< <https://www.zdnet.com/article/the-race-towards-renewable-energy-is-creating-new-cybersecurity-risks/> https://www.zdnet.com/article/the-race-towards-renewable-energy-is-creating-new-cybersecurity-risks/>

Check Point Research: Cyber Attacks Increased 50% Year over Year

Less than a month after the world witnessed one of the most serious vulnerabilities on the internet, with millions of attacks per hour attempting to exploit the Log4J vulnerability, 2021 been a record breaking year in terms of cyber-security. Back in October, Check Point Research (CPR) reported a 40% increase in cyber-attacks globally, with 1 out of every 61 organizations worldwide impacted by ransomware each week.

< <https://blog.checkpoint.com/2022/01/10/check-point-research-cyber-attacks-increased-50-year-over-year/> https://blog.checkpoint.com/2022/01/10/check-point-research-cyber-attacks-increased-50-year-over-year/>

Cloudflare Introduces Support for Relational Database Connections Through Workers

Cloudflare recently announced they are introducing support for relational database connections through Workers, their serverless application platform. The initial support is for Postgres and MySQL. There are still a number of challenges that the Cloudflare team are working through and there are opportunities for community contributions.

< <https://www.infoq.com/news/2022/01/cloudflare-relational-database/> https://www.infoq.com/news/2022/01/cloudflare-relational-database/>

**********************

INTERNET OF THINGS

**********************

Tiny machine learning design alleviates a bottleneck in memory usage on internet-of-things devices

Machine learning provides powerful tools to researchers to identify and predict patterns and behaviours, as well as learn, optimize, and perform tasks. This ranges from applications like vision systems on autonomous vehicles or social robots to smart thermostats to wearable and mobile devices like smartwatches and apps that can monitor health changes. While these algorithms and their architectures are becoming more powerful and efficient, they typically require tremendous amounts of memory, computation, and data to train and make inferences.

< <https://elearningworld.eu/tiny-machine-learning-design-on-iot-devices/> https://elearningworld.eu/tiny-machine-learning-design-on-iot-devices/>

Department of Commerce Seeks Internet of Things Experts for New Advisory Board

The U.S. Department of Commerce seeks qualified nominations for a new Internet of Things Advisory Board to advise the recently established Internet of Things Federal Working Group. The advisory board will include a wide range of stakeholders outside of the federal government with expertise relating to the Internet of Things (IoT).

< <https://www.commerce.gov/news/press-releases/2022/01/department-commerce-seeks-internet-things-experts-new-advisory-board> https://www.commerce.gov/news/press-releases/2022/01/department-commerce-seeks-internet-things-experts-new-advisory-board>

How The Internet Of Things Impacts Your Company's Cybersecurity

Ordinary, everyday objects that connect to the web and cater to our needs — such as wearable health monitors, smart toasters or air quality sensors — are examples of the Internet of Things (IoT). As described by TechTarget, IoT is "a scenario in which objects, animals or people are provided with unique identifiers and the ability to transfer data over a network without requiring human-to-human or human-to-computer interaction." In the business world, this includes videoconferencing devices, large smart screens or any controlled utility such as a smart thermostat — which can all disrupt workflow if attacked by cyber hackers. Even the most advanced technologies are never bulletproof.

< <https://www.forbes.com/sites/forbestechcouncil/2022/01/18/how-the-internet-of-things-impacts-your-companys-cybersecurity/> https://www.forbes.com/sites/forbestechcouncil/2022/01/18/how-the-internet-of-things-impacts-your-companys-cybersecurity/>

EU Internet of Things report finds high entry barriers, exclusivity concerns

The EU Commission has today published the findings of its inquiry into the 'Internet of Things', a sector that includes the use of virtual assistants, smart home accessories, and speakers like Apple's HomePod mini.

< <https://www.imore.com/eu-internet-things-report-finds-high-entry-barriers-exclusivity-concerns> https://www.imore.com/eu-internet-things-report-finds-high-entry-barriers-exclusivity-concerns>

Sector inquiry into the Consumer Internet of Things

The Commission launched the inquiry into the sector of Internet of Things for consumer-related products and services in the European Union on 16 July 2020 on the basis of European Union competition rules, in particular Article 17 of Regulation 1/2003. It is part of the Commission’s digital strategy and follows an announcement in the Commission’s Communication on Shaping Europe’s digital future. ... The findings of the sector inquiry confirm the rapid growth of the consumer IoT markets, but also identify potential concerns put forward by the respondents to the sector inquiry as well as in the submissions to the public consultation.

< <https://ec.europa.eu/competition-policy/antitrust/sector-inquiries/consumer-internet-things_en> https://ec.europa.eu/competition-policy/antitrust/sector-inquiries/consumer-internet-things_en>

How is the Internet of Things improving our lives? Three surprising advantages of technology

If you haven’t heard of the IoT or Internet of Things, you’ve probably already used it without realising. The most exciting part about new technologies associated with the Internet is that they’re becoming more and more integrated in our daily lives, improving the efficiency and outcomes of traditional systems and habits.

< <https://www.fluxmagazine.com/internet-of-things-improving-our-lives/> https://www.fluxmagazine.com/internet-of-things-improving-our-lives/>

Internet of things: innovation among pharma companies drops in YE21

Research and innovation in internet of things in the pharmaceutical sector has declined in the last year.

< <https://www.pharmaceutical-technology.com/dashboards/internet-of-things-innovation-among-pharma-companies-drops-in-2021/> https://www.pharmaceutical-technology.com/dashboards/internet-of-things-innovation-among-pharma-companies-drops-in-2021/>

Internet of things innovation among automotive industry companies has dropped off in the last year

The most recent figures show that the number of IoT patent applications in the industry stood at 133 in the three months ending November – down from 298 over the same period last year.

< <https://www.just-auto.com/features/internet-of-things-innovation-among-automotive-industry-companies-has-dropped-off-in-the-last-year/> https://www.just-auto.com/features/internet-of-things-innovation-among-automotive-industry-companies-has-dropped-off-in-the-last-year/>

Revealed: the mining companies leading the way in internet of things

Fortescue Metals and Vale are among the companies best positioned to take advantage of future internet of things (IoT) disruption in the mining industry, our analysis shows.

< <https://www.mining-technology.com/analysis/revealed-the-mining-companies-leading-the-way-in-internet-of-things/> https://www.mining-technology.com/analysis/revealed-the-mining-companies-leading-the-way-in-internet-of-things/>

Cybersecurity: a lifelong journey for smart cities

Gianni Minetti, CEO of Paradox Engineering, explains why cities must ensure security is built into their solutions from their very inception not added at a later stage of development.

< <https://www.smartcitiesworld.net/opinions/cybersecurity-a-lifelong-journey-for-smart-cities> https://www.smartcitiesworld.net/opinions/cybersecurity-a-lifelong-journey-for-smart-cities>

Smart cities partnership signals convergence of digital and energy infrastructure

Sustainable infrastructure company Generate Capital and Ubiquity Management are joining forces to build fibre-to-the-premise networks and complementary sustainable digital infrastructure.

< <https://www.smartcitiesworld.net/fibre-networks/smart-cities-partnership-signals-convergence-of-digital-and-energy-infrastructure> https://www.smartcitiesworld.net/fibre-networks/smart-cities-partnership-signals-convergence-of-digital-and-energy-infrastructure>

**********************

NEW TRANSPORT PROTOCOLS

**********************

How Facebook Is Bringing QUIC to Billions: Facebook's Matt Joras, Yang Chi discuss the technical challenges implementing QUIC and HTTP/3, from edge load balancer to mobile clients, and from application tweaking to transport congestion control.

Joras: We're going to talk about how Facebook brought QUIC to billions. First off, who are we? My name is Matt Joras. I'm a software engineer on the Traffic Protocols team at Facebook. I'm also one of the co-chairs of the IETF QUIC Working Group, which is the group that standardize QUIC.

< <https://www.infoq.com/presentations/facebook-quic-http3/> https://www.infoq.com/presentations/facebook-quic-http3/>

**********************

OTHERWISE NOTEWORTHY

**********************

CISA Releases Finalized IPv6 Guidance for Agencies

The Cybersecurity and Infrastructure Security Agency on Thursday published guidance meant to provide federal agencies with security considerations regarding Trusted Internet Connections 3.0 implementations as they transition to IPv6.

< <https://www.nextgov.com/cybersecurity/2022/01/cisa-releases-finalized-ipv6-guidance-agencies/360973/> https://www.nextgov.com/cybersecurity/2022/01/cisa-releases-finalized-ipv6-guidance-agencies/360973/>

CISA Releases Finalized IPv6 Guidance on TIC 3.0

The Cybersecurity and Infrastructure Security Agency (CISA) released the finalized “IPv6 Considerations for TIC 3.0” guidance document today, providing federal departments and agencies with security considerations related to TIC 3.0 implementation as they transition to IPv6.

< <https://www.cisa.gov/news/2022/01/20/cisa-releases-finalized-ipv6-guidance-tic-30> https://www.cisa.gov/news/2022/01/20/cisa-releases-finalized-ipv6-guidance-tic-30>

Increasing the robustness of Neighbor Discovery for IPv6

One of the biggest changes between IPv4 and IPv6 for network providers, particularly those that serve residential customers, is the absence of Network Address Translation (NAT).

< <https://blog.apnic.net/2022/01/18/increasing-the-robustness-of-neighbor-discovery-for-ipv6/> https://blog.apnic.net/2022/01/18/increasing-the-robustness-of-neighbor-discovery-for-ipv6/>

APNIC: Big Tech's use of carrier-grade NAT is holding back internet innovation

Carriers and Big Tech are happily continuing to use network address translation (NAT) and IPv4 to protect their investments, with the result that transition to IPv6 is glacial while the entire internet is shaped in the image of incumbent players.

< <https://www.theregister.com/2022/01/20/ipv4_nats_slow_ipv6_transition/> https://www.theregister.com/2022/01/20/ipv4_nats_slow_ipv6_transition/>

IPv4 address shortage driving internet designers to despair

The shortage of IPv4 addresses is causing increasing distress. With IPv4 address blocks commanding ever higher prices, Amazon's IPv4 assets are now worth billions. And it's recently been suggested that most of the loopback address block 127.0.0.0/8 should be made routable. The fact that such a problematic proposal is on the table underscores how serious the situation has become. Meanwhile, fortunes are being made by legacy address block owners selling unused addresses.

< <https://www.sidn.nl/en/news-and-blogs/ipv4-address-shortage-driving-internet-designers-to-despair> https://www.sidn.nl/en/news-and-blogs/ipv4-address-shortage-driving-internet-designers-to-despair>

Updated IPv6 Fundamentals Online Course Launched

We have launched an updated version of our IPv6 Fundamentals e-learning course in the RIPE NCC Academy. The course covers current best practices in IPv6 and skills such as calculating IPv6 subnets.

< <https://www.ripe.net/publications/news/announcements/updated-ipv6-fundamentals-online-course-launched-2> https://www.ripe.net/publications/news/announcements/updated-ipv6-fundamentals-online-course-launched-2>

OECD: Development Co-operation Report 2021: Shaping a Just Digital Transformation

Digital transformation is revolutionising economies and societies with rapid technological advances in AI, robotics and the Internet of Things. Low- and middle-income countries are struggling to gain a foothold in the global digital economy in the face of limited digital capacity, skills, and fragmented global and regional rules. Political stability, democracy, human rights and equality also risk being undermined by weak governance and the abuse of digital technology. The 2021 edition of the Development Co-operation Report makes the case for choosing to hardwire inclusion into digital technology processes, and emerging norms and standards. Providing the latest evidence and policy analysis from experts in national governments, international organisations, academia, business and civil society, the report equips international development organisations with the latest guidance and good practices that put people and the sustainable development goals at the centre of digital transformation.

< <https://www.oecd-ilibrary.org/development/development-co-operation-report-2021_ce08832f-en> https://www.oecd-ilibrary.org/development/development-co-operation-report-2021_ce08832f-en>

When Will We See Real 5G? by Doug Dawson

The non-stop wireless industry claims that we've moved from 4G to 5G finally slowed to the point that I stopped paying attention to it during the last year. There is an interesting article in PC Magazine that explains why 5G has dropped off the front burner. The article cites interviews with Art Pouttu of Finland's University of Oulu about the current state and the future of 5G. That university has been at the forefront of the development of 5G technology and is already looking at 6G technology.

< <https://circleid.com/posts/20220120-when-will-we-see-real-5g> https://circleid.com/posts/20220120-when-will-we-see-real-5g>

How 5G Clashed With an Aviation Device Invented in the 1920s

A technological innovation that helped pilots fly fighter planes during World War II is now at the heart of the dispute between airlines and AT&T and Verizon over 5G, an innovative service meant to speed up mobile devices.

< <https://www.nytimes.com/2022/01/19/business/5g-radio-altimeters-airlines.html> https://www.nytimes.com/2022/01/19/business/5g-radio-altimeters-airlines.html>

Did the FAA cry wolf on 5G?

In the sixth century B.C., Greek storyteller Aesop told the tale of a boy tasked with watching his village’s sheep herd who sought attention by crying out a false warning that a wolf was threatening the flock. Some have asked whether the Federal Aviation Administration (FAA) cried wolf about the use of new 5G wireless spectrum threatening aircraft safety. Supporting that query is confusion about why the FAA dumped this issue on the Biden administration just as the new 5G airwaves were about to be put into service.

< <https://www.brookings.edu/blog/techtank/2022/01/21/did-the-faa-cry-wolf-on-5g/> https://www.brookings.edu/blog/techtank/2022/01/21/did-the-faa-cry-wolf-on-5g/>

What You Need to Know About the FAA 5G Kerfuffle: Why is 5G only a problem for planes in the U.S.?

AT&T and Verizon finally fired up vital components of their 5G networks in the United States on Wednesday. Mostly. The two companies had already agreed twice to delay the activation of the parts of their networks that operated on the so-called C-band, because the U.S. Federal Aviation Administration had raised concerns about the spectrum’s usage.

< <https://spectrum.ieee.org/5g-faa> https://spectrum.ieee.org/5g-faa>

Are networks ready for today’s demand? Here’s how regulators will rethink ICT policy in 2022 by Malcolm Johnson, ITU Deputy Secretary-General

Over the last two years, the world’s telecom regulators, network operators and platform providers have responded decisively and effectively to the huge increase in demand created by the COVID-19 pandemic.

< <https://www.itu.int/hub/2022/01/telecom-networks-demand-regulators-rethink-ict-policy-2022/> https://www.itu.int/hub/2022/01/telecom-networks-demand-regulators-rethink-ict-policy-2022/>

HTTPA seeks to improve HTTPS trust issues

In this digital era, almost everything is becoming virtualized and put online with the promise of making our lives easier and more convenient. However, this has jeopardized users’ privacy.

< <https://blog.apnic.net/2022/01/17/httpa-seeks-to-improve-https-trust-issues/> https://blog.apnic.net/2022/01/17/httpa-seeks-to-improve-https-trust-issues/>

EU Issues Call for Proposals for DNS Resolution Service

The European Commission has issued a call for tender for an EU DNS resolution service aka a DNS resolver.

< <https://www.internetnews.me/2022/01/17/eu-issues-call-for-proposals-for-dns-resolution-service/> https://www.internetnews.me/2022/01/17/eu-issues-call-for-proposals-for-dns-resolution-service/>

------

David Goldstein

email:  <mailto:[email-masked]> [email-masked]

web:  <http://goldsteinreport.com/> http://goldsteinreport.com/

Twitter:  <https://twitter.com/goldsteinreport> https://twitter.com/goldsteinreport

phone: +61 418 228 605 - mobile; +61 2 9663 3430 - office/home