Below: On Fri, Feb 22, 2013 at 11:45 AM, Jo Rhett <jrh...@netconsonance.com> wrote: > On Feb 22, 2013, at 10:19 AM, Jim Reid <j...@rfc1035.com> wrote:
>> There's no point arguing the semantics of "don't" and "can't". As Paul >> mentioned earlier, let's remain realistic. Universal deployment of BCP38 >> simply isn't going to happen, no matter how much you or I *really want* >> that. [And I do.] Get over it. >> >> Good luck getting an ISP in downtown Mogadishu (say) to sign up to BCP38 and >> sticking to it. > > If their ability to pass traffic requires BCP38 and detected failures will > lead to de-peering, it will happen. I've enforced BCP38 within both > colocation facilities and large-scale peering. It can happen, and the "fight" > has usually been much less than expected. My employers have been tentative > about whether they'd risk a legal battle over it, but it has never come to > that. And we lost zero, flat zero, opportunities over this unless you count > some large spam operators that we turned away for multiple reasons. > > Stop saying it won't happen, and push back just a little every day. If enough > of us do this, it will come to be. > > I am seriously looking for a great opportunity to sue a very large carrier > for a failure to implement BCP38, since it very clearly meets the guidelines > for "reasonable and expected" that the courts love to use. One very large > carrier + one very large settlement, and the other carriers will notice. > > It's not impossible. It is hard, but many hard things are worth doing. As a co-author of BCP38, I am sick and tired of being sick and tired -- it is a good idea and we still need to push on this. And with regards to DNS amplification attacks I have a new way to do things I would prefer not to do -- spend more time flying around the world explaining to people how to stop being bad stewards in the basic hygiene of the Internet. If anyone can find some fault in that, then you are not part of the solution. Period. - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
