Re: [Fwd: [Asrg] Re: Documents for LMAP BOF]

Viktor S. Grishchenko wrote:
> On Monday 09 February 2004 05:45, Yakov Shafranovich wrote:
> 
>>What I still do not understand with reputation and accreditation
>>services is why the same concept of "reject from unknown domains" cannot
>>be applied to IP addresses. 
> 
> 
> I.e. IP whitelisting?
> As far as I understand, LMAP is that kind of approach. The issue is how to 
> support this (distributed) list, how it is "indexed" and how lookup is 
> performed.
> 

Actually in LMAP whitelisting would be done by domains, not IPs. 
Indexing and lookups can be resolved if people get together and create a 
standard format and protocol to do so.

> 
>>The same way in a LMAP world we can reject 
>>email or filter it because of lack of reputation or accreditation, can
>>be done with IP addresses, without a need for any protocol changes.
> 
> To own an IP address cracker has to own home PC, but owning a domain requires 
> hijacking an administered host or payment/registration/etc.
> Even domain whitelisting on the side of receiver will be much more desirable 
> than plain ip whitelisting. (So the blacklisting.)
> 

To gain connectivity to the Internet, one must have an account somewhere 
or steal an account. Therefore, it is not different IMHO from having a 
domain name.

One compelling argument which I heave heard somewhere else, is that the 
IP owner does not care about the IP identity being stolen unlike an 
email or domain name owner.

> Are you still playing devil's advocate?
> 

Yep!

Yakov
-------
Yakov Shafranovich / asrg <at> shaftek.org
SolidMatrix Technologies, Inc. / research <at> solidmatrix.com
"But in this world nothing can be said to be certain, except death and 
taxes" (Benjamin Franklin)
-------