<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Viktor,</div> <br><p class="airmail_on">On October 21, 2016 at 11:01:46 AM, Viktor Dukhovni (<a href="mailto:ietf-dane@dukhovni.org">ietf-dane@dukhovni.org</a>) wrote:</p> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>Given the scale of recent attacks, perhaps the time has come for<br>responsible networks to announce dates by which peering will cease<br>with parties that ignore BCP 38.<br></div></div></span></blockquote><div id="bloop_sign_1477098122331913984" class="bloop_sign"></div><div id="bloop_sign_1477098122331913984" class="bloop_sign"><br></div><div id="bloop_sign_1477098122331913984" class="bloop_sign">Initial reports suggest this attack is at least partially Mirai-based, thus BCP38 probably won't help. That isn't to say we shouldn't push for BCP38, but it isn't a silver bullet.</div><div id="bloop_sign_1477098122331913984" class="bloop_sign"><br></div><div id="bloop_sign_1477098122331913984" class="bloop_sign">I believe the real issue is that the vulnerabilities on the Internet are multifaceted and (in my opinion) highlight a fundamental architectural issue: end-to-end assumes all the brains are at the edges, however brains attract zombies and we've got tissue paper walls protecting us. Without vastly improved security, Internet of Things will become Internet of Zombies and I've long believed that it will simply not be possible for infrastructure providers, critical or not, to be able to scale their capacity to keep up.</div><div id="bloop_sign_1477098122331913984" class="bloop_sign"><br></div><div id="bloop_sign_1477098122331913984" class="bloop_sign">So, sure, BCP38 is a great idea and everyone should do it, but it isn't going to solve the problem.</div><div id="bloop_sign_1477098122331913984" class="bloop_sign"><br></div><div id="bloop_sign_1477098122331913984" class="bloop_sign">Regards,</div><div id="bloop_sign_1477098122331913984" class="bloop_sign">-drc</div><div id="bloop_sign_1477098122331913984" class="bloop_sign">(ICANN CTO, but speaking only for myself)</div></body></html>