[iot-wg] New on RIPE Labs: Visualisations of Periodic IoT Traffic

Eliot Lear <lear at lear.ch> wrote:
    > Thanks.  The concern here is that the device could choose to identify as
    > something else through a set of false communications.  It is indeed an
    > interesting area of research.  I am not saying there is nothing to be
    > done, but it is something that requires careful consideration as we aim
    > toward automating policy.  I fear in particular that the cloud makes
    > this quite a bit harder, and IOT manufacturer use of their own DNS
    > infrastructure will make it yet more difficult, because we are all using
    > the same cloud infra.

Manufacturers SHOULD avoid using their own DNS infrastructure in my opinion.

        Operational Considerations for use of DNS in IoT devices
         draft-richardson-opsawg-mud-iot-dns-considerations-01

Abstract

   This document details concerns about how Internet of Things devices
   use IP addresses and DNS names.  The issue becomes acute as network
   operators begin deploying RFC8520 Manufacturer Usage Description
   (MUD) definitions to control device access.

   This document explains the problem through a series of examples of
   what can go wrong, and then provides some advice on how a device
   manufacturer can best make deal with these issues.  The
   recommendations have an impact upon device and network protocol
   design.

..co-authors, reviews, pull-requests and comments sought.

{I'm annoyed that the DNSOP group declined to define "QuadX" as a term in
ietf-dnsop-terminology-ter. Actually, I don't care what it's called, as along
as I have a term for such public recursive services}

--
Michael Richardson <mcr+IETF at sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 487 bytes
Desc: not available
URL: </ripe/mail/archives/iot-wg/attachments/20200319/3de215eb/attachment.sig>