[Chapter-delegates] Vint on Internet trust issues

[Rodel Urani]

Hi,

Please see my comments inline.

Thanks,
-Rodel

--------------------------------------------------
From: "Lucy Lynch" <lynch at isoc.org>
Sent: Monday, July 19, 2010 11:54 PM
To: "Sophia B" <sophiabekele at gmail.com>
Cc: "ISOC Chapter Delegates" <chapter-delegates at elists.isoc.org>
Subject: Re: [Chapter-delegates] Vint on Internet trust issues

> On Mon, 19 Jul 2010, Sophia B wrote:
>
>> Very valid question and also timley and probing!
>
> Fascinating article - and as always, I'm amazed at the amount of
> ground Vint can cover in a public presentation. The bit that is
> most interesting to the Trust and Identity team is this:
>
> "* Cerf sees authentication and identity as problems to be solved on-line,
> but not in the way you might think -- with a centralized, single sign-on
> system. As he clarified to me afterward, he doesn't see why anybody would
> want such a thing: The risks of accident or abuse would be far too high,
> so he'd rather see federated identity systems that let us authenticate who
> we are as needed, but only for limited times and for specific purposes.
> Nor did he express any regret over leaving those functions out of the
> TCP/IP specification."
>
> T/Id has been actively promoting work related to federated identity
> systems in the Kantara Initiative, Internet2, ReFeds, and the IIW. There
> is active work in Oasis and the IETF as well and I highly recommend the
> recent article on Federations in the IETF Journal:
>
> http://www.isoc.org/tools/blogs/ietfjournal/?p=1715#more-1715
>
> The author, Leif Johansson was also a participant on the recent ISOC
> sponsored panel at the Internet2 spring meeting:
>
> http://events.internet2.edu/2010/spring-mm/agenda.cfm?go=session&id=10001087&event=910
>
> along with Josh Howlett (JANET) - who is one of the drivers of the
> FedAuth Birds of a Feather session scheduled for IETF 78:
>
> FEDAUTH - Federated Authentication Beyond the Web
> BOF Proponents: Sam Hartman and Josh Howlett
> BOF Chairs: Sam Hartman and TBD
> Agenda and drafts:  http://www.project-moonshot.org/bof/agenda/
> Draft Charter:  http://www.project-moonshot.org/bof/charter/
> Mailing list:  moonshot-community at jiscmail.ac.uk
> Mailing list archive:
> http://jiscmail.ac.uk/cgi-bin/webadmin?LIST=MOONSHOT-COMMUNITY
>
> We're also promoting internal efforts to create an ISOC federated
> identity option for membership as part of our engagement platform.
>
> Vint rightly expresses concerns about single sign on and hegemonic
> identity solutions and Google is working on some interesting ways to
> let users partition their on-line experience. This slide set from
> Paul Adams (of the Google UX team) is long both worth viewing as
> it lays out an interesting set of use cases and concerns.
>
> http://www.slideshare.net/padday/the-real-life-social-network-v2?from=embed
>
> I'd be interested to hear from folks who already participate in local
> federations (eGov, Eduroam, educational networks, grid computing, etc.)
> because we still see this as a complex set of tools and relationships.

Microsoft had made this available and fully functional since their Windows 
Server 2003. I think it is very similar particularly the use of directory 
service, PKI which includes SSL/TLS and RADIUS to interface various network 
platforms and services. Been looking for other alternatives but up to this 
moment haven't seen any better and easier to configure than that of the MS.

>
> Have you had success with a local federation?
>
> - Lucy
>
>
>> Sopha
>> ________________
>> www.cbsintl.com
>> www.dotconnectafrica.org
>>
>> On Wed, Jul 14, 2010 at 10:47 PM, Zaid Ali <zaid at sfbayisoc.org> wrote:
>>
>>> This is a great article on Vint Cerf's talk last night at Plantir
>>> Nightlife,
>>>
>>> http://voices.washingtonpost.com/fasterforward/2010/07/vint_cerf_at_palantir
>>> _night_li.html. Vint talks a lot about Trust issues on the Internet and 
>>> I
>>> also seem to see talks on cyber security, online trust, botnet attacks 
>>> as a
>>> common recurring theme on news articles and conferences I have been
>>> attending. With the introduction of Android phones and the fact that 
>>> anyone
>>> can build an application without much scrutiny we have seen a surge in a
>>> new
>>> breed of Botnets. Since the Android phones are similar to the PC market
>>> there is quite a huge explosion of security issues similar to rise of
>>> Windows desktops.
>>>
>>> The article not only raises some concerns on the technical side but also
>>> the
>>> policy side. My question to ISOC is we have a trust and identity
>>> initiative,
>>> how is the initiative involved in these discussions with various
>>> stakeholders? Can the trust and identity initiative shed some light on 
>>> this
>>> and perhaps we could have a discussion?
>>>
>>>
>>> --
>>> Zaid Ali
>>> President, Internet Society San Francisco Bay chapter
>>> www.sfbayisoc.org
>>> zaid at sfbayisoc.org
>>>
>>>
>>>
>>> _______________________________________________
>>> Chapter-delegates mailing list
>>> Chapter-delegates at elists.isoc.org
>>> https://elists.isoc.org/mailman/listinfo/chapter-delegates
>>>
>>



> _______________________________________________
> Chapter-delegates mailing list
> Chapter-delegates at elists.isoc.org
> https://elists.isoc.org/mailman/listinfo/chapter-delegates
>



> _______________________________________________
> Chapter-delegates mailing list
> Chapter-delegates at elists.isoc.org
> https://elists.isoc.org/mailman/listinfo/chapter-delegates
>