Just a guy in Vermont trying to connect all the dots...
Dan York
Author's posts
Mar 03
Deploy360@IETF89, Day 1: dnssd, sipcore, technical plenary
Our first day here at the 89th IETF meeting for the Deploy360 team starts off with a lighter schedule… which is okay because later in the week we are double- or triple-booked in some session timeslots! Today the main DNSSEC / DANE session is one that I actually did NOT write about in my “Rough Guide to IETF 89: DNSSEC, DANE and DNS” post because at that time I was not aware that DANE would be discussed in this working group. It’s the “SIPCORE” working group focused on the Session Initiation Protocol (SIP) used in voice-over-IP and while the agenda for the SIPCORE session has not yet been posted as I write this note, Olle Johansson let me know that he’d be talking about SIP and DANE in that session.
In fact, Olle’s slides about SIP and DANE are now posted online and they look quite good. I’m looking forward to that discussion this afternoon!
Prior to SIPCORE, the other group on our watch list will be the DNSSD group that, as I mentioned in the Rough Guide post, is looking at how to extend DNS service discovery past the local network. Before that, in the morning, odds are that at least one of us will be in the DHC working group as it is focused on DHCP and includes a number of IPv6 issues on its agenda.
The day will conclude with the IETF 89 Technical Plenary that will have as a technical focus “Bitcoin, cybercurrencies and Internet payment systems”. While not directly connected to the work we do here at Deploy360, it should be an interesting discussion! If you are not here in London, you can watch the IETF 89 Technical Plenary at:
That’s what our day 1 looks like at IETF 89 – if you are here please do feel free to find us and say hello!
Monday, March 3, 2014
dnssd (Extensions for Scalable DNS Service Discovery) WG
Monday, March 3, 2014, 1300-1500 UTC, Sovereign Room
Agenda: https://datatracker.ietf.org/meeting/89/agenda/dnssd/
Documents: https://datatracker.ietf.org/wg/dnssd/
Charter: https://datatracker.ietf.org/wg/dnssd/charter/
sipcore (Session Initiation Protocol Core) WG
1630-1730 UTC, Blenheim Room
Agenda: https://datatracker.ietf.org/meeting/89/agenda/sipcore/ (not available yet)
Documents: https://datatracker.ietf.org/wg/sipcore/
Charter: https://datatracker.ietf.org/wg/sipcore/charter/
Remote Participation
You don’t have to be in London to participate in the meetings of IETF 89. You can also:
- Listen to live audio streams.
- Participate in Jabber chat rooms to ask questions.
- Download the slides planned for each session.
- Listen and watch “Meetecho” conferencing sessions that provide an integrated view of slides, audio, chat and video.
Information about how to participate can be found on the IETF 89 Remote Participation page. Keep in mind that times for London are in UTC.
Mar 03
“Bitcoin and Internet Payment Systems” – IETF 89 Technical Plenary (Live Video Stream Available) (Featured Blog)
Are you interested in learning more about Bitcoin, cybercurrencies and Internet payment systems? On Monday, March 3, 2014, at 5:50pm UTC (London, UK) the Technical Plenary of the 89th meeting of the Internet Engineering Task Force (IETF) will be streamed live. The presentations during the "technical topic" part of the plenary will include... More...
Mar 02
TDYR #116 – Getting Wirecast Set Up For Livestreaming ISOC@IETF89 Panel On Tuesday
Tonight was spent getting "Wirecast for YouTube" set up for the livestreaming of what should be an interesting "Internet Society @ IETF89" Briefing Panel on Tuesday, March 4, 2014. More info at:
http://www.internetsociety.org/internet-society-briefing-panel-ietf-89
https://plus.google.com/events/c1gfue9n0i7f5hanjfu6csgeo3g
http://www.telestream.net/wirecastforyoutube/cb-landing.htm
Mar 02
Slides: Why We Need #MoreCrypto / TLS In Applications
Why do we need TLS in applications? Why do we need “more crypto”? Recently Olle Johansson put together a good set of slides that nicely summarize the issue:
Yes! We need more use of TLS! Please help us spread the word!
Mar 01
TDYR #115 – Funky Flight Delays And The First Day In London
TDYR #115 - Funky Flight Delays And The First Day In London by Dan York
Mar 01
Weekend Project: Add DKIM / DNSSEC Verifier To Thunderbird
Here’s an interesting weekend project if you use Mozilla Thunderbird as your email client – add the DKIM Verifier add-on to ensure the validity of signatures on email messages. The connection to DNSSEC is that the public keys for DKIM are stored in DNS and so DNSSEC ensures that you are getting the correct DKIM keys.
This past week Pier Carlo Chiodi published a great tutorial, “Verifying DKIM signatures on Thunderbird with DNSSEC” that walks through the steps of adding the DKIM Verifier add-on to Thunderbird to verify the signature on the message and validate it all via DNSSEC.
As he notes in his text, this tutorials does the DKIM/DNSSEC validation in the client (Thunderbird) while other solutions might do the validation within the email server itself.
Thanks to Pier Carlo Chiodi for writing this tutorial. This is great to see… now we just need similar tutorials for other email clients!
Note: the image in this article is from Pier Carlo Chiodi’s blog post.
Feb 28
TDYR #114 – In Praise Of Propeller-driven Commuter Flights
TDYR #114 - In Praise Of Propeller-driven Commuter Flights by Dan York
Feb 28
Introducing A New Deploy360 Topic: TLS for Applications
How can we help make it easier for developers to learn how to add TLS (SSL) support to their applications? If you’ve been following our work here at Deploy360 for a while, you know that part of our attention is focused on accelerating the deployment of DNSSEC and of technologies that help in securing BPG and Internet routing.
With DNSSEC, a great bit of our focus has been on the enormous potential of the DANE protocol to help make Internet connections using Transport Layer Security (TLS) more secure. You already use TLS probably every day with your web browser… although you may know it more by its older name of “Secure Sockets Layer (SSL)”. Any time you go to a website with a “https” at the beginning of a URL, or if you see a “lock” icon in many browsers, you are using TLS. Any app developer using TLS is a great candidate to be using DANE.
But how do we get more developers using TLS to encrypt their connections and secure the data sent over those connections?
Around the time we were thinking about this, a new working group was launched within the IETF called “Using TLS in Applications (UTA)”. This working group is chartered to create a set of “best practices” guides to help application developers know how to implement TLS in the best way possible to defend against attacks such as those outlined in draft-sheffer-uta-tls-attacks. You can find out more about the UTA Working Group, including how to join the public mailing list, at these links:
It seemed to us that these documents being created within the UTA group were ones that should be shared widely. I put some ideas forward on the UTA mailing list and received positive responses – and so we’re launching this new section of Deploy360 to help get that information out. As the UTA working group publishes documents we’ll try to do what we can to help more developers and network operators learn about those documents.
To that end, I’ll also note that the UTA working group will be meeting this coming Friday, March 7, from 0900-1130 UTC at the IETF 89 meeting in London. I wrote about this in my article yesterday about the DNS-related activities happening at IETF 89. You can join the session remotely to listen in, so if this is of interest to you please do join.
Now, our “TLS for Applications” section here on Deploy360 will not be ONLY about the documents coming out of the UTA working group. We’ll also be finding the best documents and tutorials related to TLS that we can find out there on the Internet. We’ve put up a content roadmap identifying the types of documents we intend to add to the site.
We’d love to hear your feedback about this new section of Deploy360. Do you see this as something that will be helpful to you?
How You Can Help
We need your help! In order to provide the best possible resources to help application developers expand their use of TLS, we need to hear from you! We need your feedback to help us know how we can best help you. A few specific requests:
1. Read through our pages and content roadmap - Please take a look at our “TLS for Applications” page to understand what we are trying to do, and also please take a look at our content roadmap for BGP. Are the current resources listed helpful? Is the way we have structured the information helpful? Will the resources we list on our roadmap help you make your routers more secure?
2. Send us suggestions – If you know of a tutorial, video, case study, site or other resource we should consider adding to the site, please let us know. We have a list of many resources that we are considering, but we are always looking for more.
3. Volunteer – If you are very interested in this topic and would like to actively help us on an ongoing basis, please fill out our volunteer form and we’ll get you connected to what we are doing.
4. Help us spread the word – As we publish resources and blog posts relating to adding TLS to applications, please help us spread those links through social networks so that more people can learn about the topic.
Thank you! Working together we can make the Internet more secure!
Feb 28
Meet The Deploy360 Team At IETF 89 Next Week
Will you be at IETF 89 next week in London? If so, please feel free to say hello to one of our team members there. We’ll all be there: myself (Dan York), Chris Grundemann, Megan Kruse and Jan Žorž.
You can expect to find at least one of us in any of the sessions that relate to IPv6, DNSSEC or securing BGP. Specifically, some of the sessions we’ll be at can be found in these posts:
- 3 Sessions About Securing BGP At IETF89 Next Week
- 6 Sessions About IPv6 At IETF 89 Next Week In London
- 8 Sessions About DNSSEC / DANE / DNS At IETF 89 Next Week
We’re always interested in talking to people about the work we do here and also how we can help you get these technologies more rapidly deployed. Got a question for us? Find us at the IETF sessions and let us know.
You can also send an email to us at “deploy360@isoc.org” if you’d like to set up a time to meet.
See you in London!
