RE: DDoS RID

["Wijnen, Bert (Bert)" <bwijnen@lucent.com>]

So in the spirit of "Early feedback and/or Architectural direction"
that we were discussing at various places lately.
Would it be good to have someone make it clear to them that there
is much bogosity and operational impact that cannot be ignored 
and that without addressing those concerns they will have no chance?

Thanks,
Bert 

> -----Original Message-----
> From: Steven M. Bellovin [mailto:smb@research.att.com]
> Sent: vrijdag 31 januari 2003 12:46
> To: Randy Bush
> Cc: iesg
> Subject: Re: DDoS RID 
> 
> 
> In message <E18eUvP-0000z0-00@roam.psg.com>, Randy Bush writes:
> >>> Kathleen Moriarty <moriarty@ll.mit.edu> wants to do a BoF 
> based on a coming
> >>> update to draft-moriarty-ddos-rid-02.txt.
> >>> is this ops or sec?  should i encourage?
> >> It's both.  I think her ideas are operationally insane, 
> but that's me 
> >> -- I wanted an ops person to do a sanity check.  (There are also 
> >> serious privacy issues.)
> >
> >thanks.  last round, you did not clue us that you thought 
> that there was
> >bogosity here, so i was being confused and hence nicer than 
> i might have
> >been.  will take care of it.
> >
> >randy
> >
> >
> Sorry.  It's a way to trace stuff back that, to me, requires amazing 
> amounts of information exchange between operators, with 
> serious privacy 
> concerns.
> 
> 		--Steve Bellovin, http://www.research.att.com/~smb (me)
> 		http://www.wilyhacker.com (2nd edition of 
> "Firewalls" book)
> 
>