Properties for identifiers (was Re: Security requirements for identification)

[Pekka Nikander <pekka.nikander@nomadiclab.com>]

[Dropping HIP ML since this does not concern HIP any more,
 and fixing the subject.]

Tony Li wrote:
> Ok, let me see if I can give a taxonomy of possible
> identifier properties:
>
> 1. Syntax
> 2. Global Semantics
> 3. Local Semantics
> 3. Generation

In my humble opinion, we should most probably first have
some kind of idea of the semantics, before starting to
consider syntax or generation.  On the other hand, all the
four issues are intertwined, and therefore considering
pure semantics before syntax or generation may be pretty hard.

What comes to semantics, I don't see much value in any
*long* *term* solution where the identifiers have *considerably*
different local and global semantics.  (The only difference I
possibly see is that an ID may be globally anonymous or
pseudonymous while locally well known and linkable to the
real world.)  Personally, I don't mcy want to consider short
term solutions, since I am lacking both interest and expertese
in that area.

From my long term point of view, I also don't believe in
identifiers that are have any kind of topological semantics.
From my point of view, one of the most important aspects of the
id/loc split is to leave topology to the locators, and free
identifiers from the burden of topology.

I do admit that topologically linked identifiers may make sense
if we consider just multi-homing and not mobility or the other
potential goals of id/loc split.  Hence, it may make sense to
have such identifiers as a part of a short term solution.

Finally, there were two dimensions that you did not mention in the
property list at all:

  1. Security, or the level of assurance of identification that
     one can gain through using the identifier.  Note that we
     get a fair level of assurance from the routing system today.

  2. Privacy, or the easyness/hardness of linking an identifier
     to a real world entity (node or user).  Note that we do
     have some level of privacy today, due to NAT, dynamic address
     allocation in dial up servers, etc.

There are certainly others, but these two came to my mind.

--Pekka Nikander