Hacker News Reader

Comment by infinisil | Hacker News Reader

ETHZ is developing a new kind of internet architecture: https://scion-architecture.net/

It's deployed in some places and working already. Citing from the webpage:

> SCION is the first clean-slate Internet architecture designed to provide route control, failure isolation, and explicit trust information for end-to-end communications.

Also it will reduce latency, increase throughput and more, as mentioned in the papers.

The project has really been getting traction in recent years, it may just become our new internet base layer.

Currently the people at ETHZ are working on verifying router hardware mathematically to guarantee SCION's properties.

View on HN

Very interesting approach. I've read about SCION before. I believe, however, that its goal is primarily security. The reduced latency claim simply comes from the fact that they try to restrict routing in such a way that, for example, traffic with source and destination both in the US will never leave the US because of some weird routing policies. I'm not sure about this. Somehow, it seems to be against the principles of a truly free internet.

Yeah, speed isn't the primary focus, more of a byproduct

I don't understand what this has to do with a free internet, routing doesn't have any affect on that

I think the poster means "free" as in data travelling freely regardless of State/national borders, as the internet largely does today.

Fixed link that doesn't fail on incorrect certificate: https://www.scion-architecture.net/

Thanks, is there a reason for sites not 301 redirecting non-www to www urls or vice-versa? Wouldn't that help to avoid problems like these?

They also don't implement any security headers: https://observatory.mozilla.org/analyze.html?host=scion-arch...

That wouldn't help. If you go to https://foo, before the server can even redirect you to https://www.foo, it has to present a valid cert for foo without www.

Thanks for the answer. :)

Reply on news.ycombinator.com