[Chapter-delegates] [Internet Policy] 'Smart' home devices used as weapons in website attack (was RE: Hack http://www.bbc.com/news/technology-37738823)

[CW Mail]

Well,

(a) Facebook and Amazon et al can look after themselves, although it appears that they didn't.

(b) > inter-provider redundancy/back-up/failover …

	Something like that is required. Whether by the market or by regulation.

CW

On 24 Oct 2016, at 17:26, Greg Shatan <gregshatanipc at gmail.com> wrote:

> Putting myself in the shoes of a a purchaser of DNS services, such a request/requirement could conceivably double my cost for DNS services -- unless service providers (a) offer a more limited service intended to be only a redundancy/back-up plan to another provider's primary service, or (b) service providers collaborate to offer inter-provider redundancy.  These would increase cost, but not double it.  I assume inter-provider redundancy/back-up/failover creates additional technical challenges as well, with some increased costs in the bargain.
> 
> This is not going to be an easy sell to a consumer of DNS services who has already decided to take the step of contracting with one DNS service provider. "Thank you for signing up with us for managed DNS services.  You should now go to one of our competitors (here's a list) and sign up again."
> 
> Of course, if dual-DNS providers becomes more common,  DDoS attacks will target pairs of large DNS service providers, to disrupt the "second source" in a reasonable number of instances....
> 
> Greg Shatan
> 
> On Mon, Oct 24, 2016 at 11:08 AM, Carsten Schiefner <carsten at schiefner.de> wrote:
> David, all -
> 
> On 24.10.2016 16:48, David Sarokin wrote:
> > That was exactly the point I was trying to make earlier (though not as
> > succinctly as yours).
> >
> > Is there a policy element to this? Should companies be encouraged or
> > required to diversify in the way you suggest? Should DNS services
> > provide mandatory cross-company access in case of downtime?  Or is this
> > something that market forces will take care of?
> 
> the latter. Or rather, your last point.
> 
> As much as I am concerned.
> 
> Because as a commercially operating and competing service provider of
> any kind, all decision making about my resiliency fate is mine. And only
> mine.
> 
> Best,
> 
>         -C.
> _______________________________________________
> To manage your ISOC subscriptions or unsubscribe,
> please log into the ISOC Member Portal:
> https://portal.isoc.org/
> Then choose Interests & Subscriptions from the My Account menu.
> 
> _______________________________________________
> To manage your ISOC subscriptions or unsubscribe,
> please log into the ISOC Member Portal:
> https://portal.isoc.org/
> Then choose Interests & Subscriptions from the My Account menu.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://elists.isoc.org/mailman/private/chapter-delegates/attachments/20161024/0a59aa19/attachment.htm>