Subject: [Newsclips] IETF SYN-ACK Newspack 2021-03-08

From: "David Goldstein" <[email-masked]>
Date: Mon, 8 Mar 2021 23:14:00 +1100

The IETF SYN-ACK Newspack collects IETF-related items from a variety of news outlets and other online publications. They do not represent the views of the IETF and are not checked for factual accuracy.

**********************

IETF IN THE NEWS

**********************

IAB Report to the Community for IETF 110

This is the IAB report for the period between IETF 109 and IETF 110. This report presents a summary of activities.

< <https://www.iab.org/2021/03/05/iab-report-to-the-community-for-ietf-110/> https://www.iab.org/2021/03/05/iab-report-to-the-community-for-ietf-110/>

Event Wrap: DNS-OARC 34

APNIC participated at DNS-OARC 34, held online from 4 to 5 March 2021. The two-day event included webinars on DNS-over-QUIC, DNSSEC cryptography, and SVCB and HTTPS, to name a few. View the agenda for more information.

< <https://blog.apnic.net/2021/03/02/event-wrap-dns-oarc-34/> https://blog.apnic.net/2021/03/02/event-wrap-dns-oarc-34/>

Open and disaggregated transport comes of age

... Heavy Reading has stressed the role of systems integrators in filling the operational and integration expertise gap. But, in addition to these third-party players, common architectures and standardized approaches must be both developed and agreed upon by a large number of operators and networking suppliers. Both Mphahlele and Telefónica's Cantó stressed this point in their talks. Groups such as TIP and the Open Compute Project (OCP) play essential roles in building consensus and common architectures, as do traditional standards organizations, including the Internet Engineering Task Force (IETF), Optical Internetworking Forum (OIF) and others. TIP has also been focusing on the testing and integration of products and end-to-end solutions. The community is coming together in plugfests and lab and field trials, and then listing the different validated offerings in the TIP Exchange marketplace with their corresponding badges.

< <https://www.lightreading.com/opticalip/open-and-disaggregated-transport-comes-of-age/a/d-id/767825> https://www.lightreading.com/opticalip/open-and-disaggregated-transport-comes-of-age/a/d-id/767825>

RFID News Roundup

... One Data Model/Semantic Definition Format—an initiative to improve interworking across different ecosystems' data models using an emerging standard from the IETF. The OneDM Liaison Group adopts and aligns IoT models contributed by participating organizations, so best practice models for desired features or purposes can be identified.

< <https://www.rfidjournal.com/rfid-news-roundup-824> https://www.rfidjournal.com/rfid-news-roundup-824>

Research: How JSON parsers can create security risks when it comes to interoperability

... But JSON specifications themselves are divergent, said Miller, citing IETF JSON RFC (8259 and prior), ECMAScript Standard, JSON5, and HJSON.

< <https://portswigger.net/daily-swig/research-how-json-parsers-can-create-security-risks-when-it-comes-to-interoperability> https://portswigger.net/daily-swig/research-how-json-parsers-can-create-security-risks-when-it-comes-to-interoperability>

Journal OCB serait-il toujours protégé par des brevets ? [Would OCB Journal still be protected by patents?]

... En particulier, le groupe de travail OpenPGP à l’IETF n’a jamais été très enthousiaste à l’idée de recommander OCB pour la prochaine version du standard actuellement en cours d’élaboration. Rien dans les règles de l’IETF n’interdit de recommander ou même d’imposer un algorithme couvert par des brevets (l’IETF impose simplement que les éventuels brevets soient divulgués, afin que les groupes de travail prennent leurs décisions en connaissance de cause), mais les auteurs d’OpenPGP craignaient qu’inclure OCB dans OpenPGP ne conduise à des problèmes d’interopérabilité entres les implémentations libres du standard (couvertes par la licence évoquée ci-dessus) et les autres.

< <https://linuxfr.org/users/gouttegd/journaux/ocb-serait-il-toujours-protege-par-des-brevets> https://linuxfr.org/users/gouttegd/journaux/ocb-serait-il-toujours-protege-par-des-brevets>

Обновление очков Magic Leap принесло поддержку WebRTC [Magic Leap glasses update brings support to WebRTC]

... Протокол «WebRTC», работающий как Javascript API, позволяет подключённым устройствам в любой сети выступать в качестве узлов связи и недавно был принят в качестве стандарта Консорциумом Всемирной паутины (World Wide Web Consortium, W3C) и Инженерным советом Интернета (Internet Engineering Task Force, IETF), так что обновление своевременное.

< <https://holographica.space/news/magic-leap-lumin-webrtc-26366> https://holographica.space/news/magic-leap-lumin-webrtc-26366>

业者进度太慢ICANN延后DNS扩充安全部署 [ICANN is too slow to delay DNS expansion security deployments]

... 传统上的网域名称系统（DNS）是将网路位址改为方便人类阅读的字串，不过这个类似网路电话簿的系统自1983年问世以来，即经常遭受各种攻击。因此，网际网路工程任务小组（Internet Engineering Task Force，IETF）在1999年提出了DNSSEC，于现有的DNS上加入数位签章的机制，它会产生一对新的加密金钥，并将新的公钥传送给经DNSSEC验证后的解析器，以确保DNS内容不会于源头被修改，DNSSEC的部署将可阻止骇客移转DNS用户的流量。

< <http://cmen.cc/shdt/202103/14705.html> http://cmen.cc/shdt/202103/14705.html>

安全研究人员鼓吹Security.txt网路标準盼网站充份揭露安全政策 [Security researchers have .txt security websites to fully expose security policies]

安全研究人员Ed Foudil最近提交了新的Security.txt草案予网际网路工程任务小组（Internet Engineering Task Force，IETF），这是一个供网站描述安全政策及联繫管道的草案，期望让它标準化以让安全研究人员与网站之间的沟通更为流畅。

< <http://www.cmen.cc/news/202103/15101.html> http://www.cmen.cc/news/202103/15101.html>

专访信而泰李利平：潜心攻关十余载 逐步实现通信测试领域国产化替代 [Interview with Xinertai Li Liping: Concentrating on researching key problems for more than ten years, gradually realizing localized substitution in the field of communication testing ]

... 最后，逐步深入参与到国内外行业协会、标准组织和产业联盟，积极跟进行业标准和新技术，如CCSA、ODCC、AII及国际的IEEE、IETF、AVNU等等

< <https://stock.stockstar.com/IG2021030300000870.shtml> https://stock.stockstar.com/IG2021030300000870.shtml>

**********************

SECURITY & PRIVACY

**********************

us: Task Force Establishes Way Forward After Charter Extension: Year 2.5

Supply Chain Risk Management: Keeping supply chains secure is no easy feat. From product development to its final delivery, a single product can require hundreds of entities, varying compliance requirements, and a diverse array of logistical challenges. With the nation’s critical infrastructure dependent on information and communications technology (ICT) to operate, disruptions or security incidents to the ICT supply chain can have cascading impacts within and across organizations, sectors, and the National Critical Functions.

< <https://www.cisa.gov/blog/2021/03/04/task-force-establishes-way-forward-after-charter-extension-year-25> https://www.cisa.gov/blog/2021/03/04/task-force-establishes-way-forward-after-charter-extension-year-25>

MANRS Fellowship 2021 Now Open

The MANRS (Mutually Agreed Norms for Routing Security) Fellowship Program 2021 is now accepting applications. If you are an emerging leader eager to improve the well-being of the Internet’s global routing system, apply now.

< <https://www.internetsociety.org/blog/2021/03/manrs-fellowship-now-open/> https://www.internetsociety.org/blog/2021/03/manrs-fellowship-now-open/>

Event Wrap: MANRS Tech Talk

APNIC’s Tashi Phuntsho participated in a MANRS webinar titled, ‘Lessons Learned in Capacity Building and Community Engagement in 2020?’ on 10 February 2021.

< <https://blog.apnic.net/2021/03/03/event-wrap-manrs-tech-talk/> https://blog.apnic.net/2021/03/03/event-wrap-manrs-tech-talk/>

**********************

INTERNET OF THINGS

**********************

If you have devices connected to the Internet, this book about legal pitfalls of the Internet of Things is for you

With Wi-Fi seemingly around most every corner; devices in our hands, bodies, cars and homes connected to the Internet; and questions about the reliability and security of this connectivity, it's inevitable the "Internet of Things" will be the subject of legal battles. A new book by University of Dayton law professor Thaddeus Hoffmeister will help anyone with legal questions and issues about connected devices.

< <https://udayton.edu/news/articles/2021/02/thaddeus_hoffmeister_book_internet_of_things_and_the_law.php> https://udayton.edu/news/articles/2021/02/thaddeus_hoffmeister_book_internet_of_things_and_the_law.php>

Farming for the future with the Internet of Things

It might well be handy for your fridge to tell you when you’re out of milk (or even order some more up), for the TV to be able to speak to the toaster and to be able to turn the heating up when you’re heading home from work.

< <https://www.scotsman.com/country-and-farming/farming-for-the-future-with-the-internet-of-things-3149594> https://www.scotsman.com/country-and-farming/farming-for-the-future-with-the-internet-of-things-3149594>

< <https://www.msn.com/en-gb/money/technology/farming-for-the-future-with-the-internet-of-things/ar-BB1e5Pl0> https://www.msn.com/en-gb/money/technology/farming-for-the-future-with-the-internet-of-things/ar-BB1e5Pl0>

**********************

OTHERWISE NOTEWORTHY

**********************

A new decade for digital foreign policy

More than ever, technology is making its way to the top of governments’ political agendas. ITU Secretary-General Houlin Zhao reflects on the role of foreign policy and diplomacy in achieving achieve universal connectivity and affordable ICT services by the end of the decade.

< <https://www.itu.int/en/myitu/News/2021/03/02/09/56/Digital-foreign-policy-new-decade-Houlin-Zhao> https://www.itu.int/en/myitu/News/2021/03/02/09/56/Digital-foreign-policy-new-decade-Houlin-Zhao>

Framing the Internet Governance Debate: The Long Road to WSIS+20 (2025) by Wolfgang Kleinwächter

Since the early 2000s, the global debate about Internet Governance did have its ups and downs. We did see the establishment of ICANN, the UN World Summit on the Information Society (WSIS), the making of the Internet Governance Forum (IGF), and the failure of the World Conference on International Telecommunication (WCIT). We did see NetMundial and the IANA transition.

< <https://www.circleid.com/posts/20210304-framing-the-internet-governance-debate-long-road-to-wsis-2025/> https://www.circleid.com/posts/20210304-framing-the-internet-governance-debate-long-road-to-wsis-2025/>

China to push establishment of multilateral global internet governance system

China will promote the establishment of a global internet governance system that is multilateral, democratic and transparent, according to a draft outline of the 14th Five-Year Plan for national economic and social development and the long-range objectives through the year 2035.

< <http://www.xinhuanet.com/english/2021-03/05/c_139787366.htm> http://www.xinhuanet.com/english/2021-03/05/c_139787366.htm>

< <http://en.people.cn/n3/2021/0306/c90000-9825661.html> http://en.people.cn/n3/2021/0306/c90000-9825661.html>

------

David Goldstein

email:  <mailto:[email-masked]> [email-masked]

web:  <http://goldsteinreport.com/> http://goldsteinreport.com/

Twitter:  <https://twitter.com/goldsteinreport> https://twitter.com/goldsteinreport

phone: +61 418 228 605 - mobile; +61 2 9663 3430 - office/home