On Fri, 2009-01-30 at 13:02 +0100, Henning Rogge wrote:
> Am Friday 30 January 2009 12:02:23 schrieb Bernd Petrovitsch:
> > On Fri, 2009-01-30 at 11:42 +0100, Henning Rogge wrote:
> > > Am Friday 30 January 2009 11:30:46 schrieb Bernd Petrovitsch:
> > > > On Fri, 2009-01-30 at 10:56 +0100, Henning Rogge wrote:
> > > > [...]
> > > > > as we are talking about security, I would like to share some ideas
> > > > > about a useful and acceptable PKI architecture for Freifunk/Funkfeuer
> > > > > networks.
> > > > >
> > > > > Theoretically we could just set up a central PKI (which would make
> > > > > things very easy), but this would allow the owner/maintainer of the
> > > > > PKI to control the whole network. This is not acceptable for a
> > > > > community project like Freifunk and Funkfeuer.
> > > > >
> > > > > My idea is that each gateway to the internet set up it's own PKI root
> > > > > key. The owners of the gateways can build something like a web of
> > > > > trust between each other.
> > > >
> > > > So when a "network" administratively forces a limited set of gateways,
> > > > you have exactly the situation you wanted above to avoid.
> > >
> > > No, you can just open your own gateway and begin your own PKI root... and
> > > ask
> >
> > Assume a network using public IPs: I don't think that a random ISP
> > customer (as seen from the ISP) has success in getting the ISP to speak
> > BGPv4 with him.
> If you want use public IP space you will have some kind of layer-8 policy 
> which kind of new gateways you will sign.

The problem is: Even if I want to make a gateway for FunkFeuer at my
home, I plain simply can't.
It is a prerequisite of your approach that everyone can run a Internet
gateway (given some hardware, know-how, time, ...).
And that doesn't hold for public IP addresses as one must be an AS -
IMHO at least for the foreseeable future.

> But I'm not sure what you try to say with your posts Bernd.
> First you complain (at least that's how I understand your post) about the 
> possibility of control through a network with few gateways, then you argue 
> that you cannot built new gateways easily in a network with public IP space.

And take both facts together and see how you get the situation of a de
facto central CA (disguised as few CAs which are centrally
managed/organized). And you explicitly wanted to avoid the
centralization
I read here a clear contradiction.

	Bernd
-- 
Firmix Software GmbH                   http://www.firmix.at/
mobil: +43 664 4416156                 fax: +43 1 7890849-55
          Embedded Linux Development and Services




