Hi, I get yout point. I was focusing only on customer issues and not on negative externalities... they were not part of my reasoning hand they also have to be addressed. ----- Messaggio originale ----- Da: "Eliot Lear" <lear@ofcourseimright.com> A: "Giuliano Peritore" <g.peritore@panservice.it>, iot-discussion@ripe.net Inviato: Martedì, 11 aprile 2017 11:29:43 Oggetto: Re: [iot-discussion] What role does the SP play in protecting consumers re IoT? Hi Giuliano, On 4/11/17 11:07 AM, Giuliano Peritore wrote: Hi, in my (humble) opionion we've all to cooperate to preserve the "End-to-end" principle of "the" internet. Any middleware or filter *imposed* by SPs violates this principle. Indeed, a "rule" to fully disconnect a connection service because of compromised "things" would never be probably accepted by regulation. The internet has evolved till now because intelligence has migrated in the edges, outside the core network. The devices have to be secure, and security has to be implemented on the end point (CPEs ?, user protection devices ?, virual protection devices ?). Yes, it can be a security service given by customer's SP, but it *has* to be a security service which can be deactivated or activated by demand of the customer. The customer has to be able to buy a connection service *without* the protection service. I think there are two cases: 1. The consumer is creating a negative externality. Where does responsibility rest with remedying it (if anywhere)? 2. The consumer is motivated to protect him- or herself. These are not mutually exclusive, and it is possible that (2) will Trump (1) over time, where it hasn't in the past. A reasonable question for this group is how they view (1) and (2) in the context of provider policies and responsibilities. Based on that, what capabilities should CPE and PE devices have? And what further network management capabilities should they have? Going to your other point, preserving end-to-end doesn't mean that we can't throw breakers on unwanted communications where the network can easily detect them (say L3/L4 info), and where they are clearly understood to be unwanted. Is that of interest? Eliot -- -- Giuliano Peritore - g.peritore@panservice.it Direzione Generale - Panservice Servizi professionali per Internet ed il Networking Telefono: +39 0773 410020 - Fax +39 0773 470219 Numero verde: 800 901492 - http://www.panservice.it