Escaping the Ossification Trap with Gnunet
Total Page:16
File Type:pdf, Size:1020Kb
Escaping the Ossification Trap with GNUnet Christian Grothoff BFH & The GNU Project 25.1.2018 \We shape our tools, and thereafter our tools shape us". {John Culkin What can be done? I Democracies are slow ) Effective regulation of mega-corporations exists only under dictatorships Dictatorship or Corpocracy? Regulation? I Charles Stross (@34c4) warns: Companies are AIs that develop faster than the law I Julia Reda (@IGF) warns: Regulation of platforms paradoxically can give them more power Regulation? I Charles Stross (@34c4) warns: Companies are AIs that develop faster than the law I Julia Reda (@IGF) warns: Regulation of platforms paradoxically can give them more power I Democracies are slow ) Effective regulation of mega-corporations exists only under dictatorships Dictatorship or Corpocracy? Better Technology! Data protection! Decentralization! Self-Organization! Technological impact assessment!1 1Difficult, but better than design-by-buzzword! Technological impact assessment case-study: Name systems DNS/DNSSEC DNS Server Root Zone a.root-servers.net. www.example.com? a.gtld-servers.net.test E2D3C9.... DNSSEC Trust Anchor NS . S4LXnQiBS... 49AAC1... DS RRSIG www.example.com? Recursive DNS Server Stub www.example.com? Name .com Resolver Server NS a.gtld-servers.net.test a.gtld-servers.net. A 93.184.216.119 DS 3490A6.... RRSIG example.com. K0rp9n... RRSIG com. U/ZW6P3c... AD www.example.com? RRSIG A 93.184.216.119 example.com. K0rp9n... DNS Server example.com a.iana-servers.net. RAINS Authority Server Root Zone 44 ) com ZK ; :registry www.example.com? com ISD-44 Trust Anchor ; ISD-44 Trust Anchor (NS RZK44 44 RZK & QS 44 44 S RZK www.example.com? Client query service www.example.com? Authority Server (in ISD 44) (in ISD 44) com.registry SZKcom (NS; exauth:net; ZKexample:com) SQS44 (A; 93:184:216:11) S www.example.com? ZK example : com ( A ; 93 :184 ? Indicates a query, otherwise a response :216 NS Delegation record in RAINS (with zone key) :11) A IPv4 address record SK (V ) Signature with key K over value(s) V Authority Server QS44 Key of (anycasted) query service in ISD 44 exauth.net TRC44 Trusted root configuration of ISD 44 RZK44 Root zone key of ISD 44 ZKname Zone key of authority for \name" Namecoin Append registration to block chain Namecoin Client P2P Network Get copy of Block Chain block chain Local Copy of Block Chain The GNU Name System (GNS) Pbob zone database Bob's NSS www.Pbob? Bob's GNS Service carol PKEY Pcarol = P .gnu bob A 203.0.113.54 www A 203.0.113.54 PUT E( PUT E( PKEY A (H(carol, 203.0.113.54)) (H(www, P carol )) P bob P bob ), ), Carols's GNS Service DHT P2P Network PUT (H(www, Pcarol ), E(A 203.0.113.34)) )) )) bob ) carol P P carol Pcarol zone database P www A 203.0.113.34 (H(carol, PKEY (H(www, 203.0.113.34) A E( GET E( GET www.Palice ? Palice zone database Alice's NSS A 203.0.113.13 Alice's GNS Service bob PKEY Pbob = P www.carol.bob.P ? .gnu alice alice www A 203.0.113.13 A 203.0.113.34 But you cannot change DNS! In a peer-to-peer network nodes interact as equals. Peer-to-Peer Network Classification I What is the network designed to achieve? I Do some peers have priviledged or special roles? I Can new nodes freely join? Underlay P2P networks I 802.11s I Freifunk (B.A.T.M.A.N) Overlay P2P networks I Gnutella / Bittorrent I Waste I Freenet / RetroShare / I2P / Tor I Bitcoin / Altcoins Full-Stack P2P networks I GNUnet Peer-to-Peer Networks The Internet Protocol (IP) is a peer-to-peer protocol. Peer-to-Peer Networks The Internet Protocol (IP) is a peer-to-peer protocol. Underlay P2P networks I 802.11s I Freifunk (B.A.T.M.A.N) Overlay P2P networks I Gnutella / Bittorrent I Waste I Freenet / RetroShare / I2P / Tor I Bitcoin / Altcoins Full-Stack P2P networks I GNUnet Full Stack Internet GNUnet Google Applications DNS/X.509 GNU Name System TCP/UDP CADET (Axolotl+SCTP) IP/BGP R5N DHT Ethernet CORE (OTR) Phys. Layer HTTPS/TCP/WLAN/... Raised Abstraction Level SecuShare p≡p Reuters Social Lake CRDT-Git IP PSYC GNU Taler Xolotl Scalarproduct SMC PT/VPN Multicast Fog-of-Trust RPS Set intersection RegEx GNU Name System CADET (Axolotl+SCTP) R5N DHT CORE (OTR) HTTPS TCP WLAN IP ... Reality is messy2 secushare voting social conversation secretsharing psyc gns speaker microphone consensus psycstore multicast revocation scalarproduct zonemaster pt fs set namestore vpn exit dns dnsparser datastore identity cadet regex tun dnsstub gnsrecord dht hostlist block rps datacache nse topology core transport ats peerinfo fragmentation nat hello 2But this applies to the Internet as well. Lake Peers may not be all equal Challenges I Lack of business models: no control, no data, no property I Self-organizing protocols achieving usability and robustness I Fault-tolerance, scalability and decentralization I Resource utilization, accounting and privacy () https://taler.net/) I Public awareness about value of privacy and independence Ossification The older the Internet becomes, the harder it is to change! Evolution can still happen in an overlay network! It likely is now or never! Join us and build it!.