On May 5, 2011, at 9:43 AM, David Miller wrote:

> In a properly functioning system - folks that consume the service don't need 
> to know which node they are utilizing.

Right, it doesn't matter IF things are functioning properly.  If they're not, 
however...

> Providing the capability for well behaved customers to select/prefer a 
> particular node over another would also allow evildoers to select/prefer a 
> particular node over others - thereby increasing the attack surface of this 
> node, yes?

This isn't expressly about the capability to allow consumers to select one node 
of another, it's about transparency in which nodes they're using being visible 
in the control plane - there's no indication of that today.

As for attack surface expanse, no.  You could largely already accomplish 
something of this sort today in the elements of the forwarding path you 
influence if you were an evildoer aiming to do such a thing.

-danny

Reply via email to