Since I've only attended to the #RIPE84 remotely, I visited NL-IX-Summerdrink in Frankfurt to get the conference feeling again.
It was a wonderful and pleasant evening !
Et pour bien finir le #RIPE84, une notification du RIPE que deux participant·es ont signalé qu'ils avaient été testés positifs au retour :-(
And that's the end of #RIPE84 for me. Back at home, gonna relax and recover from a week of socializing. Saw more people this week than I did in the last two years.
Cool, cool, cool. Time to make a report about a CoC violation. Way to end the meeting.
Technical report on #RIPE84 : we had two 10 G/s uplinks (Deutsche Telecom), typically 120 Mb/s used (a maximum at 721 M/s, 600 being IPv6).
45 WiFi access points.
The test: setting up a HTTPS site, asking a certificate and revoking it. Then, running a paid ad on it and see how many clients connect.
Answer: around 80 % of clients happily accept the revoked certificate.
Now, Geoff Huston tests certificate revocation. In March, many russian certificates were revoked by CAs, as sanctions. Did it work?
Spoiler: no. Revocation does not work.
About the "Insufficient identity data for matching" slide, I'm thinking that the mess of online identities (and the country-specific variations) is the last protection we have for our personal data in the EU.
(As usual, Estonia, the digital paradise, is the worst, privacy-wise.)
The european directive NIS2 may force this ID checking by domain name registries. #RIPE84
#eIDAS checking is now implemented in the (free software) registry #FRED https://fred.nic.cz/
The Web site of the project (checking domain name registrants with #eIDAS) https://regeid.eu/
The speaker criticizes Germany for being the only country in the EU choosing the most privacy-protecting provisions of #eIDAS, complicating the sevice.
May be the Germans have some historical experience about the risk of identity controls?
Last day of #RIPE84 !
Since I'm still attending virtual, I used to visit the cool spacial.chat of the conference. But it looks like we are a maximum of 2 users again - unfortunately like every day during the week.
Nevertheless, I'm looking forward to attend live again.