On 21-jul-2005, at 16:18, Hallam-Baker, Phillip wrote:
There are three versions of Plato, what he intended to say, what he
said
and how it was read. I suspect that what he was intending to say in
the
cave metaphor was that empirical measurements can be affected by more
than the thing we intend to measure. What he said was that ideal forms
are more real than observation. For the next two thousand years his
argument was used to assert the primacy of reason over observation.
No need to overcompensate, though. For instance, look at Galileo's
experiments: they barely support his theories, because is tools were
so crude. But Popper et al. covered this ground extensively.
So what insights does your empirical approach to internet security
provide?
The Internet does not provide the necessary type of security for the
majority of its billion+ users.
Hm, then why do they use it?
Spam, phishing, DDoS extortion are all serious Internet security
problems. Attempting to change the subject, pretend that they are
someone else's concern, pretend that they are insoluble and so
should be
ignored, all these evasions have to stop.
Helping to stop Internet crime is the IETF's responsibility. If the
IETF
wants to remain an important player in Internet security standards it
has to address these issues.
Please don't reuse the word "security" for all three of these issues.
They're very different. I agree that the IETF should do more against
spam and DDoS. The trouble with spam is that there is simply no
consensus to be reached, and the IETF doesn't have any mechanisms to
move forward when there is a long-term lack of consensus. So despite
being a bad precedent, it's good that Microsoft is throwing its
weight around in this area.
As for misspelled "fishing": I haven't seen this myself, so I can't
be sure what the deal is, but it sure looks like people are way too
gullible and not using the mechanisms that are available today. Why
doesn't any business sign its messages with S/MIME, for instance?
Yes, you can ask Boeing and Airbus to make their cargo holds bomb
proof, but maybe the planes don't fly too well that way and scanning
baggage on the ground makes more sense. (I.e., fix this outside the
IETF.)
DDoS: there hasn't been any real effort to do something against DDoS
except tracing it back to the source(s). I agree that we can and
should do much more in this area.
_______________________________________________
Ietf@xxxxxxxx
https://www1.ietf.org/mailman/listinfo/ietf