This is a dangerous power grab.
RPKI and social security ( nobody wants to peer with a idiot ) are already here and many things are in development.
The FCC and by extension the USA should GTFO and let the multi stakeholder models do their work.
The FCC and by extension the USA should GTFO and let the multi stakeholder models do their work.
Though I'd prefer a decentralized/pinned approach when single point of failure (read as: CA) is the alternative.
... and coretx's "nobody wants to peer with an idiot" is clearly not working here. These networks are still being peered with.
Maybe the regulators should start by regulating only international peering.
The idea to regulate only international peering looks best so far. It's much like (m)any other regulations that are only present on the border between countries, and are absent inside.
The concepts of "national" and "international" don't map very well to the internet.
Many companies run multiple ASes, and many companies are peering at IXPs all over the world...
With China specifically it could work, because they internally control their points of peering with the rest of the world. With Russia, less so. With a "normal" Western country, likely infeasible, but in the latter case the internet access is not controlled and weaponized by the government, so there is no real need, self-regulation suffices.
[0] corporations being legally people.
If I have the underlying context right here, this is effectively regulation prohibiting people from lying in the course of their normal operations, which smells a lot like a typical fraud statute, and government restrictions on fraud-like things have almost always been upheld as constitutional. (The main exception I'm aware of is US v Alvarez, but even there, SCOTUS said it was only a problem to ban lying for lying's sake; banning lying with the purpose of getting a benefit is acceptable).
Government is a “multi stakeholder” model. Whether that or private you get a committee determining based upon the biases of the committee.
Same old human bullshit all the way down no matter the semantic bullshit that annotates how the technical decision was made.
a.k.a RPKI
You all should go touch grass and learn to roll with our human frailty and imperfection rather than drive yourselves mad bouncing off the walls of your language and mathematical primitives.
Just remember you’re one of billions and no one needs you specifically. Just enough people overall so that life isn’t so shit one would be better off dead themselves
> it just needs to be implemented
Do you know BGPKit [1]? I'm not sure what the state of the project is, but I remember vaguely them implementing ASPA and being involved in the RFC back then.
Was that because the government mandated that outcome?
When Let's Encrypt eventually stops behaving in an altruistic fashion, we'll stop doing near-mandatory TLS.
Regardless, for HTTP there's an entire 'year 2000's web' worth of people out there using browsers that can access the non-corporate web. As the corporate web diverges with things like stateful HTTP extensions, UDP HTTP, and CA TLS only implementations (if not spec) there's no need to switch to a niche protocol like Gemini. Just making a normal website on the web is enough to bring back the old small web environment. As a human person not operating under a profit motive and just doing things for kicks this is just fine. A silver lining like how usenet is actually good again now that most people don't get it from their ISP.
Their root CA can't really be revoked either unless you want to turn off most of the internet. Not that big CAs would ever suggest anything like that in the name of "security"
Has it really been so many years since people used to do tcp injections and walk around coffee shops or whatever returning results faster than the internet server and injecting goatse?
You guys have forgotten who tls protects.
The risk comes from the absolutely bonkers corporate/institutional use cases of automatically executing all random unverified programs sent to you. When you remove this crazy use case suddenly all the problems (and bonkers requirements) go away.
Seeing a goatse is not the end of the world and actual MITM injection attacks like you describe are rather rare now. I miss when wifi use to be open and that issue mattered.
“…a idiot…”
You’re right about peering with idiots. A shame social media is so popular since that’s about all it gets us. Peering with idiots.