Re: [Anima] FYI: Self-Driving Networks without Self-Crashing Networks

2021-07-10 Thread Alan DeKok
> On Jul 8, 2021, at 10:52 PM, Brian E Carpenter > wrote: > > I've just come across Jeff Mogul's keynote speech about self-driving (i.e. > autonomic) networks from a couple of years ago. Well worth reading before > designing your own autonomic network: > https://conferences.sigcomm.org/sigc

Re: [Anima] FYI: Self-Driving Networks without Self-Crashing Networks

2021-07-10 Thread Alan DeKok
On Jul 10, 2021, at 12:44 PM, Michael Richardson wrote: > Alan DeKok wrote: >> Networks are generally organized by configuration, not by state. >> i.e. the "state" of the network, such as it is, is buried inside a >> random grab-bag collection of confi

Re: [Anima] Registrar certificate EKU bits

2021-07-20 Thread Alan DeKok
> Perhaps someone else will find this email useful. > Mostly, it convinces me to never set any EKU bits. > I guess, I need to set serverAuth too, now that I think about it. Yes. Alan DeKok. ___ Anima mailing list Anima@ietf.org https://www.ietf.org/mailman/listinfo/anima

[Anima] Re: Concern about draft-ietf-uta-require-tls13-10 with IoT protocols

2025-04-08 Thread Alan DeKok
ps a different question is "Do we want to avoid mandating TLS 1.3 for everyone *else* in the world, simply because one use-case refuses to upgrade?" My answer to that would be "no". The benefit gained everywhere else by mandating TLS 1.3 likely outweighs the minor problems of

[Anima] Re: [Uta] [Last-Call] Re: Concern about draft-ietf-uta-require-tls13-10 with IoT protocols

2025-04-10 Thread Alan DeKok
andate TLS 1.3 now, but perhaps we will mandate it one day. I just don't see any of the current arguments against mandating TLS 1.3 changing in 10 or even 20 years. Alan DeKok. ___ Anima mailing list -- anima@ietf.org To unsubscribe send an email to anima-le...@ietf.org

[Anima] Re: [Last-Call] [Uta] Concern about draft-ietf-uta-require-tls13-10 with IoT protocols

2025-04-10 Thread Alan DeKok
erywhere _else_ is fine. And if that's true, what is the plan for mandating TLS 1.3, and when we will put that plan into effect. If those other issues can't be addressed, then by the same token, there's no need to address the "don't mandate TLS 1.3" argumen