On Fri, 2009-01-30 at 11:42 +0100, Henning Rogge wrote:
> Am Friday 30 January 2009 11:30:46 schrieb Bernd Petrovitsch:
> > On Fri, 2009-01-30 at 10:56 +0100, Henning Rogge wrote:
> > [...]
> >
> > > as we are talking about security, I would like to share some ideas about
> > > a useful and acceptable PKI architecture for Freifunk/Funkfeuer networks.
> > >
> > > Theoretically we could just set up a central PKI (which would make things
> > > very easy), but this would allow the owner/maintainer of the PKI to
> > > control the whole network. This is not acceptable for a community project
> > > like Freifunk and Funkfeuer.
> > >
> > > My idea is that each gateway to the internet set up it's own PKI root
> > > key. The owners of the gateways can build something like a web of trust
> > > between each other.
> >
> > So when a "network" administratively forces a limited set of gateways,
> > you have exactly the situation you wanted above to avoid.
> No, you can just open your own gateway and begin your own PKI root... and ask 

Assume a network using public IPs: I don't think that a random ISP
customer (as seen from the ISP) has success in getting the ISP to speak
BGPv4 with him.

q.e.d.
	Bernd
-- 
Firmix Software GmbH                   http://www.firmix.at/
mobil: +43 664 4416156                 fax: +43 1 7890849-55
          Embedded Linux Development and Services




