Re: Security of devices other than the Gateway (was Re: simple security)

[Gert Doering <gert@space.net>]

Hi,

On Mon, Mar 29, 2010 at 06:57:28AM +1030, Mark Smith wrote:
> As much as I think using ULAs for this is a good simple solution, one
> model I've thought could be better is the "association" model used by
> bluetooth or DECT handsets and base stations. If you setup an
> trusted association between devices, via some sort of enrolment
> process (e.g. press a button on both devices at once, then acknowledge
> the relationship), probably with an expiry period (to allow short
> term trust e.g. temporary access to your printer for a day), the access
> to devices could then be addressing independent. Following that model,
> you could access your home NAS, fridge etc. from any location, ULA or
> global.

Hear hear.

I'm all for that.  Time to leave the encrusted IPv4 models behind.

(The whole model of "listing specific IP addresses in firewalls to
define who is allowed to do what" is something we've learned to accept,
because we do not have anything better, but that doesn't make it any
more useful.  Think "renumbering networks" and "firewall rules in
other people's firewall tables"...)

Gert Doering
        -- NetMaster
-- 
Total number of prefixes smaller than registry allocations:  150584

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279