start	end	text
6880	10080	Thank you. Thank you all for coming.
11300	15960	This is a sort of a modification of a talk I've been giving for a while.
15960	21340	At Usenix Lisa they refer to this as Vixie's Internet Governance Rant.
21420	27620	But I realized I wasn't doing much good and that I needed to behave more like a bomb-tossing revolutionary
27620	29680	and less like a politician.
30120	34060	And Jeff gave me an opportunity to test-pilot the new talk here,
34060	38220	where apparently bomb-tossing revolutionaries are more prevalent.
49260	54120	Okay. One of my favorite authors, Barbara Tuchman, wrote a book.
54600	60200	And you need to go to Amazon.com and get a copy of that book for yourselves.
60520	65780	Trust me on this. If you hate it, then send it to me and I will give you your money back.
75090	79670	Can I talk closer to the microphone? Yes, I'm concerned about the echo.
82230	88970	So what Tuchman had to say about folly, of course, takes a book to say.
89590	96210	But qualifications, as you can see on the slides, it has to be seen as counterproductive in its own time.
96210	101010	It's very easy to look back with the benefit of history, a lot of perspective, and say,
101010	105590	well, that was very stupid. To be folly, it has to be obviously stupid,
105590	108690	even at the time the decisions are getting made and implemented.
110470	114550	There had to be a feasible alternative, right? You can't really call it a decision
114550	118750	if all you were doing was running away from some circumstance right there.
118750	123690	There had to be some choice that you could have made, that a sensible person in your place would have made,
123690	125370	and then it can be called folly.
126170	132650	And lastly, it can't be the action of just one guy, one person,
132650	136050	because that could be a simple matter of mistake, right?
136050	139050	You don't have all the facts or you drank too much or something.
139050	143230	But if you had a group of people together and they all sort of nod sagely at each other
143230	147110	and say, yes, this is the right thing, but it's completely boneheaded,
147110	150850	that, in Tuchman's definition, can be called folly.
152250	159930	And the examples that I picked out for this slide would be Troy and the Greek horse.
159930	164210	We call it a Trojan horse. It's actually a Greek horse.
164910	171290	But anyway, the signs and portents, if you read the original Homer on that,
171290	174430	are really, really obvious, right?
174430	178090	They didn't just put a wooden horse in front of the city and disappear,
178090	180890	as you might read in the Cliff Notes version.
180890	183850	There were all kinds of different things.
183950	189930	Just everything from the weather to, you know, hints and tips and so forth
189930	196470	to really let you know that Homer was saying that the people inside the walls of Troy were morons, right?
196470	198110	They were not simply fooled.
201390	208710	Britain used to rule the sand where we are sitting, and they don't now.
208710	215710	The story of how they avoided it, how they let control go away, spans decades,
215710	219550	and it required a lot of people to do a lot of really, really stupid things
220870	226150	when, frankly, the colonists at that time were strong.
226150	231630	They started out that period of decades as strong British monarchists, loyalists.
231830	236610	They just didn't feel like they wanted to pay taxes unless they had seats in Parliament,
236610	241970	and it would have been easier to give them seats and have the British Empire be a little larger.
242790	244750	People said that at the time.
246050	250090	I said that Hitler invaded Russia or tried to invade Russia.
250130	253090	What I really mean is his general staff said,
253090	258350	Clearly this can be done. Napoleon was just incompetent. We can do it.
259390	263250	Everyone who's ever tried to invade Russia suffered the same fate.
264910	269470	And interestingly, oil production in this world, right?
269470	272270	There are some countries that produce a lot more than they consume,
272270	275710	and then there are other countries that consume a lot more than they produce.
275930	281630	And so we have OPEC as an example of how prices are controlled by the producer side.
281630	286670	But can you imagine how long the oil-producing countries of the world would be able to hold out
286670	291270	if somehow the oil-consuming nations also had a union and said,
291270	294590	We just are not going to pay more than a certain number of dollars per barrel.
294810	299490	It turns out that it's not a one-sided, they need us more than we need them,
299490	308670	and yet the oil-consuming nations just continue paying rather than getting some stiffness in their backbone.
308810	310830	These are all examples of folly.
310830	314490	These are all things that you could have known at the time that that wasn't going to work
314490	316950	or was going to have a very bad outcome.
321000	324240	Two quotes, and then I'll launch into the Internet side of all of this.
325220	328020	For those of you who are vision-impaired, I shall read them aloud.
328020	334940	Wooden-headedness, the source of self-deception, is a factor that plays a remarkably large role in government.
335060	339180	It consists of assessing a situation in terms of preconceived fixed notions
339180	342800	while ignoring or rejecting any contrary signs.
342800	347460	In other words, the power to command frequently causes failure to think.
347660	352660	You have seen this, perhaps, if you have a pointy-haired boss, especially if that boss was me.
352920	355700	It works at any scale you want.
355700	360260	The power to command frequently causes failure to think.
367680	374460	So, this Internet thing that has taken the world, pretty much taken over the world,
374460	378400	started as a research and engineering project.
378560	384400	It was built by the academic people, people who had government contracts,
385020	389060	and it was built for other people who had government contracts to use.
389940	395360	And they made a number of design decisions that were appropriate for the community that they were building it for.
397660	404940	The traditional example is, they were telnetting back and forth from host to host,
404940	410820	and typing their passwords in the clear, not because they were stupid, but because it was a totally trusted network.
410820	413800	That was a completely safe, sane thing to do.
414580	419860	But, they kept saying in the early days, and if you go read any history of the Internet,
419860	424660	you're going to see some marketing terminology along the lines of,
424660	428340	we always intended this to be a global domination force.
428420	430400	Well, I don't know if that can be true.
431240	436660	For example, John Postel, who was a friend and whom I miss very much,
436660	442480	once wrote that you ought to be liberal in what you accept, and conservative in what you generate.
442640	448840	And he thought that that would lead to a kinder, gentler Internet, where implementations could be robust.
448840	451940	But if you're liberal in what you accept, you'll get more spam.
452180	456660	And if you're conservative in what you generate, you will make less money from phishing.
457140	462920	And so, I don't think there's any evidence that anyone involved early on
462920	468460	ever thought that this would really be a global dominating force the way that we know it today.
469520	472240	And that underlies most of what I have to say today.
476980	483440	First thing they did, they only let research and engineering and contractors people connect.
484540	491320	The DCA's job early on was to keep people off the network, because there was a lot of interest.
491320	497120	And I'm sure a number of you can tell stories, as I can tell, of being at some company
497120	503540	where you really wanted to be able to go FTP files from somewhere on the then ARPANET or NSFNET,
503540	505780	but you weren't allowed to get a connection.
506260	511800	And please realize, these were 9600 VOD analog leased line circuits connected to an IMP somewhere,
511800	514720	but every IMP port was controlled by the DCA.
514800	518000	And if you didn't have a contract, and they couldn't do a background check on you,
518000	519660	you weren't going to get connected.
519900	522500	It's almost as though they knew their network was very fragile,
522500	526060	and if they let any bad people on it, then the whole thing would fall down and go boom.
527120	529400	Although that's not the excuse they used.
531720	537220	What they could have done is to build a network that was expecting to grow,
537220	542700	instead of building a network that was expecting to sort of reach a certain size and then stop.
542820	547360	They could build a network that was expecting to have strangers on it and not just friends.
547920	550020	And they could certainly have thought about scale.
550020	552340	What if 6 billion people used this?
552340	555020	How would that change the design decisions we're making today?
555020	560080	Now I'm not suggesting that they should have adopted a boil the ocean strategy
560080	565440	and said we're not going to do anything until we have a complete design in our head
565440	567420	as to how it could scale globally.
567420	569060	That's not what I'm asking for.
569060	572460	What I'm asking for is just ask us a couple of questions.
574360	581280	How will the decisions we're making today limit this from being acceptable to 6 billion people?
581280	584580	I think that they didn't need to spend more money.
584580	588040	They just needed to spend the time and money they spent a little more wisely.
591530	592690	What happened?
593350	594870	It's a matter of history.
594870	599990	A bunch of other networks started up and started connecting to each other.
599990	602990	Eventually it was commercialized and privatized.
602990	613530	And most of the problems that we face today in terms of high cost to go with the high benefit of Internet use
613530	620230	is traced to what happened instead of the right thing at this early, early moment.
623370	626190	Let's talk about SMTP.
628110	632710	I once sent Eric Allman, what amounts to a flame, saying,
632710	637670	look, this send-mail policy that you have about being an open relay is bad.
637670	639250	And there are spammers out there.
639250	643370	And they're going to systematically find all of these open relays
643370	647990	and use them to sort of send things that they could never send from their own T1
647990	651350	because people would refuse to accept traffic from them.
651690	655730	And Eric said, well, you know, you've got to be liberal in what you accept and so forth.
655730	658210	A year later, he sent me an apology.
658210	663350	And he put in logic in send-mail to lock out relay by default
663350	668230	unless you were on some trusted list of hosts or networks or whatever.
668230	672730	But it's worth noting that send-mail was not the first SMTP implementation.
672730	676990	It was the most widely popular in the early years, but it was not the first one.
676990	680750	They all did this because it was a reasonable thing to do.
680750	682870	For that matter, LPD used to do this.
682870	687310	You could print on other people's printers and use other people for your print queue
687310	688770	and they would send the stuff back to you.
688770	692270	And it all just worked because we were all friends, I guess.
693950	699510	Some of you, this is not on the slide, but some of you will recall our login D hole
700130	704350	where you just made the assumption that whatever the PTR value was
704350	708510	associated with someone else's address could be looked up in your .rhosts file
708510	710570	and if it matched, then it was okay.
710570	715450	The fact that the other person, the owner of the IP address, was in control of that string
715450	717530	just didn't occur to people.
718270	719990	So, I don't know.
720830	723370	What were they thinking? Where were they thinking?
724710	729890	None of the headers have really ever been validated by most of the implementations.
729890	735690	I know I've gotten mail from various robots running on big mainframes saying,
735690	739650	syntax error in the received header you added to this mail message
739650	741870	as it was going through, so we're bouncing it.
742130	745910	But for the most part, you can put anything anywhere and it just goes through.
747390	751350	So, spammers are currently allowed to add a lot of extra received headers
751870	755210	with or without funky time zones in order to frustrate our desires
755210	757230	to find out where things come from.
758150	761850	There was an assumption that every host would have a postmaster mailbox.
761850	765470	After all, what host would be on the internet and send mail
765470	767850	without wanting to hear complaints about it?
768490	769890	What host, indeed.
771270	773790	There was a turn command. Very interesting.
773790	778110	You could connect to somebody, use the hello command in the SMTP protocol
778110	779690	to tell it who you were.
779690	782990	It probably wouldn't compare that to your PTR or anything else.
782990	784830	It would just say, okay, that's who you are.
784830	786950	And when you got to the end of sending your mail to it,
786950	790310	you could use the turn command and it would dump its entire mail queue
790310	794630	toward you on the basis of what you had put into the hello command.
796050	797610	Fascinating logic.
799650	801510	What could they have done differently?
801510	807170	Well, frankly, IBM Profs, which was junk by today's standards,
807810	810670	had a pretty large user base.
810670	813810	They had attachments, they were multilingual,
814490	818950	they didn't do a lot in terms of one host sending mail to another,
818950	822030	but they had a good user base.
822030	825590	They dominated what was then the Fortune 500
825590	828290	in terms of all the email in the world.
828570	831010	And if they had just looked at the feature list and said,
831010	833730	you know, if we're going to present this as better,
833730	836010	let's make sure it's at least as good.
841440	844800	Let's talk about classful IP addressing.
845880	852600	In 1989, I was a network administrator at Digital Equipment Corporation,
853240	856820	and we had two class B networks.
857500	862580	And I was responsible for handing out address blocks
862580	864800	to other people anywhere in the world,
864800	867920	and DEC at that time was still a major corporation.
867920	872800	We had like 130,000 employees in a lot of time zones.
872840	875380	So it was getting a little bit cramped,
875380	878360	and I was about to ask for a couple of more class Bs,
878360	882160	and my boss said, oh, what the hell, go ask for a class A.
882160	884300	And I said, but we don't need a class A.
884300	886880	We're never going to have 16 million hosts here.
887680	891120	And my boss said, well, you know, just ask.
891120	892440	Maybe they'll give it to us.
892440	895380	It will sure be a lot more convenient for us if they say yes.
895380	896420	And they did.
897920	901520	So net16 is currently the property of HP,
901520	903320	along with a couple of other class As
903320	905740	that have come into their possession over the years.
906940	910280	If you want to know sort of why the people around the world,
910280	911280	especially in China,
911280	912800	where they would like to get enough addresses
912800	916640	to deploy billions of DSL lines,
916640	918240	they're a little bit concerned
918240	921560	about the way we wasted address space early on in IPv4,
921560	924380	and they want to keep that from happening again in IPv6.
924380	926080	And who can blame them?
931060	933340	So what could they have done differently?
934740	936460	They might have asked the question,
936460	938380	look, on this whole class C thing,
938380	941260	where you get a slash 24 network block
941260	943900	capable of handling about 250 hosts,
943900	947660	if we gave out all the ones that are in the allocation plan,
947660	949720	that would call for a global routing table
949720	951540	of two million entries.
951560	953100	How would we route that?
953940	955520	And then they might have said,
955520	958620	well, you know, over a backbone of 9,600 bought analog links,
958620	960220	we're probably not going to be able to send
960220	961840	that much routing material.
961920	963420	So let's come up with a plan
963420	965680	that we could actually do something about, right?
965680	966920	It's 20 years later.
966920	968180	We still don't know how to route
968180	970780	two million different destinations.
970940	972360	Right around 100,000,
972360	974980	you start to hit some hard limits
974980	977220	on the way that BGP and other sorts of
977220	979100	global routing protocols work.
979300	982840	So they didn't need to be rocket scientists.
982840	984600	Unfortunately, they were rocket scientists.
984600	985960	Maybe that was the problem.
986680	988220	What they needed to do was just ask
988220	990040	some simple, straightforward questions.
990040	993620	How would we route this if this allocation plan filled up?
994580	996760	They could also have asked,
996760	998300	you know, Stanford is a university.
998300	999320	They have one campus.
999320	1001140	What are they going to do with a net block
1001140	1003780	capable of supporting 16 million hosts?
1004800	1007220	And they could certainly have wondered,
1007220	1008560	how's this going to scale?
1013780	1017340	So the rescue for classful IP addressing,
1017340	1018560	class A, class B, class C,
1018560	1021000	was classless IP addressing,
1021000	1022300	so-called CIDR.
1024140	1025800	And it works.
1025800	1027160	It's what we're using today.
1027420	1029600	But it's important to note
1029600	1031240	that the people who designed it
1031240	1032380	were the stakeholders.
1032380	1034360	They were the owners of the routers.
1034620	1038020	And it seemed obvious to all of us
1038020	1039660	that the people who had the routers
1039660	1040740	that had to run this code
1040740	1042900	ought to have a strong hand in determining
1043580	1045360	sort of how much complexity and cost
1045360	1047080	and whatnot they would be bearing.
1048140	1049820	What we didn't quite realize
1049820	1051660	was that they would design something
1051660	1054180	that would have a lock-in effect.
1054180	1056440	In other words, since renumbering
1056440	1059220	these address blocks is very tough,
1059220	1061000	we now have a system
1061000	1063160	where you have to get your address blocks
1063160	1064440	from your provider.
1064860	1067320	And if your provider is not responding well
1067320	1069280	to market pressures or your own pressures
1069280	1072300	and is, for example, overcharging you for transit
1072300	1074860	and giving you poor service,
1074860	1076280	you can't leave that provider
1076280	1077920	unless you are willing to pay
1078380	1079980	a renumbering penalty.
1081800	1085500	So this was really kind of the fox guarding the chicken house
1085500	1087880	as far as design was concerned.
1087880	1090280	What could they have done differently?
1091620	1095780	Okay, so Class A and Class B were too granular.
1095780	1098040	Having to choose between 16 million hosts
1098040	1100800	or 65,000 hosts or 250 hosts
1100800	1102900	was clearly too granular.
1102900	1104720	But that doesn't mean that we needed to
1104720	1107120	have every possible bit boundary
1107120	1109540	be a network block.
1110120	1112200	It's possible that we could have just come up
1112200	1114180	with less granular classes
1114940	1116620	and come up with something
1116620	1118000	that fit the size of the community
1118000	1119840	and fit the size of what routing table
1119840	1121140	we thought we could support.
1121140	1123880	And then we would still have address portability.
1124020	1125980	Not that it would have been in the interests
1125980	1127740	of the designers of this
1127740	1130680	that we would all have address portability.
1130740	1132740	So maybe there would have needed to be some reform
1132740	1134520	as to how these things get decided
1134520	1136720	in addition to some new thoughts
1136720	1139000	as to how to make this decision.
1145280	1146720	But wait!
1147180	1148840	IPv6 is going to save us, right?
1148840	1151840	It doesn't matter that classless routing was bad
1151840	1153480	because it was only a placeholder
1153480	1155560	to keep the internet growing
1155560	1157660	until we could get IPv6.
1160140	1162480	But I ran out of room on this slide
1162480	1163900	when I was trying to come up
1163900	1165520	with the things they did wrong.
1166720	1168520	They widened the address space
1169280	1171280	by a factor of four.
1171460	1173280	So instead of four billion,
1173280	1175040	which is 2 to the 32nd power,
1175040	1177360	we have some other number I can't pronounce,
1177360	1179420	which is 2 to the 128th power
1179420	1180900	of possible addresses.
1181180	1182380	And that's because they thought
1182380	1183740	the problem they had was
1183740	1185620	that they didn't have enough addresses.
1185940	1187460	Okay, well, we're still not out
1187460	1189920	of IPv4 address space.
1189920	1193020	The original Address Lifetime Extension Project
1193020	1195480	said that by 2005 we'd be out.
1195480	1198180	And so we had to rush this IPv6 thing through
1199320	1200840	because the world will end
1200840	1202620	if we run out of IPv4 space.
1203660	1206420	We didn't run out of IPv4 space.
1206960	1209340	And so, clearly, they solved a problem
1209340	1210480	we weren't having.
1211000	1212180	But in addition to that,
1212180	1213580	they failed to solve some problems
1213580	1215780	that we were having and are still having.
1215880	1218400	In fact, they made some of those problems worse.
1220900	1222580	They did not put any kind
1222580	1223860	of automatic renumbering in.
1223860	1225260	There was a lot of pressure to do that,
1225260	1226080	but they just said,
1226080	1227420	oh, that's too complicated.
1227420	1228720	That'll make it take too long
1228720	1230060	to get this protocol out the door,
1230060	1231700	so we're not going to support that.
1231700	1234120	So once you get your provider-assigned addresses
1234120	1236660	in IPv6, you'll be just as locked in
1236660	1238560	as you were in IPv4.
1239700	1243160	They assumed that once we had IPv6,
1243160	1244300	that NAT would die.
1244300	1245920	They thought NAT was only being used
1245920	1248540	to expand the address space
1248540	1250020	and make it possible for people
1250020	1251060	to have address space
1251060	1251960	who couldn't get enough
1251960	1252940	from their provider
1252940	1254080	or from the Internet
1254080	1256060	or Internet or whoever.
1256160	1257860	They didn't realize that NAT
1257860	1259080	would work its way
1259080	1261480	into the world's consciousness
1261480	1263880	as kind of an adjunct to firewalls
1263880	1267160	in terms of how we provision things
1267160	1269380	and how we do access control.
1269680	1271560	And so now there is a proposal
1271560	1274900	to do NAT for IPv6.
1274960	1276620	Not because people are out of addresses,
1276620	1277900	as you can see,
1278660	1280720	but because they need NAT.
1280720	1281820	They just need NAT.
1281820	1283800	It's not an addressing thing anymore.
1286220	1288060	They really wanted to keep using
1288060	1289800	provider-assigned addressing.
1289800	1291080	I don't know if that's because
1291080	1291940	they had corruption
1291940	1293320	and they knew that somehow
1293320	1295000	they needed to keep letting
1295000	1296460	bad Internet providers
1296460	1298220	lock their customers in,
1298220	1300180	or if they were just dolts.
1300180	1301380	I don't know.
1301840	1303140	But I know that they gave
1303140	1306320	each LAN a slash 64.
1307740	1309960	So every Ethernet segment,
1309960	1311340	every VLAN you have,
1311340	1312220	is able to have
1312220	1315280	18 billion billion hosts on it.
1317840	1319980	Every house that gets
1320060	1321220	a DSL connection gets
1321340	1322380	a slash 48,
1322730	1324240	which is 1.2 million
1324240	1326300	billion billion addresses.
1326300	1327620	My house is large,
1327620	1329020	but it's not that large.
1330960	1333420	And every multi-homed enterprise,
1333420	1334200	for example,
1334200	1335440	my employer,
1335440	1336320	or ISP,
1336320	1338130	starts out with a slash 32,
1339300	1340980	which is 79 billion
1341840	1344360	billion billion addresses.
1344720	1346800	There are 6 billion people
1346800	1348060	on the planet.
1348060	1349560	If you gave each one of them
1349560	1351460	an IP address
1351460	1352500	for every light switch
1352500	1353180	in their house,
1353180	1355020	assuming they have electricity,
1355020	1356580	and gave them 10 cell phones
1356580	1357760	and 10 laptops
1357760	1358980	and so forth,
1358980	1360560	it is potentially
1360560	1361560	going to be necessary
1361560	1362760	that each one of them
1362760	1365400	might have 20 addresses
1365400	1366440	and, you know,
1366440	1367360	16 times,
1367360	1368720	or 6 times 20.
1369080	1371620	180 billion would have been enough.
1372840	1374800	And I just don't know
1374800	1375860	what they were thinking,
1375860	1377720	except they thought
1377720	1378920	the problem that they were having
1378920	1379920	is that they didn't have
1379920	1381260	enough address space.
1381260	1381940	And, boy,
1381940	1382720	that's not the problem
1382720	1383940	we were having.
1384560	1385640	But now we're having
1385640	1386520	all the same problems
1386520	1387520	we were having before,
1387520	1388780	except they're bigger.
1390940	1392860	What could they have done?
1393000	1393760	They could have asked
1393920	1395020	a simple question,
1395020	1396200	what else is wrong
1396200	1396880	with V4
1396880	1398880	besides the address space?
1398880	1400040	What are the other things
1400040	1401740	that people complain about?
1404080	1406020	And they just didn't.
1406300	1407900	And I was there,
1407900	1408900	and I tried to raise
1409020	1410020	a number of these issues,
1410020	1412520	and perhaps they all put me
1412520	1413720	into their kill files
1413720	1414760	because they're tired
1414760	1415540	of listening to me
1415540	1416540	rant about stuff.
1416540	1418320	But I wasn't the only one.
1419040	1420780	These questions were asked,
1420780	1422500	but they were dismissed.
1426730	1428870	Let's talk about TCP.
1431050	1432090	TCP assumes
1432090	1433390	that all the other flows
1433390	1434950	that you share your path with
1434950	1437430	are going to be fair.
1437430	1438050	They're going to do
1438050	1440230	their own fair share scheduling.
1440470	1441410	It has no provision
1441410	1443150	for what I'm calling
1443330	1444310	a congestive flow
1444310	1446050	that will be bursty.
1446050	1446850	Like, for example,
1446850	1448490	voice over IP or NFS
1448490	1450030	or something like that.
1452030	1453410	They assume that
1453410	1454770	nobody between you
1454770	1455550	and your destination
1455550	1456730	will put any restrictions
1456730	1458410	on ICMP.
1458810	1459470	In other words,
1459470	1460410	they designed
1460410	1461870	path MTU discovery
1461870	1463190	without looking at
1463190	1464450	what providers were doing
1464450	1465910	even in that day.
1466270	1467390	A number of providers
1467390	1469230	are now putting
1470910	1472390	private RFC 1918
1472390	1474530	addresses on their core routers.
1474530	1476230	If they wanted to send you an ICMP,
1476230	1476670	they couldn't
1476670	1477630	because it would be coming
1477630	1478590	from an address space
1478590	1479910	you couldn't reach.
1482710	1484330	The initial sequence number
1484330	1486310	used to start out at zero.
1486310	1487330	Now it's random.
1487330	1488170	And the reason is
1488170	1489690	spam.
1489690	1490290	It turned out
1490290	1491270	that you could script
1491670	1492830	a TCP session.
1492830	1493630	You could figure out
1493630	1494370	which segments
1494370	1495390	you needed to send
1495390	1496630	and each segment
1496630	1497430	you send
1497430	1498330	has to include
1498330	1499690	some kind of an ACK
1499690	1501670	for what they will send you.
1502130	1503510	And you can script
1503510	1504270	the whole thing
1504270	1505010	if you know
1505010	1505950	what the other guy's
1505950	1506970	initial sequence number
1506970	1508030	will be.
1508050	1508530	And spammers
1508530	1509670	were doing that.
1509670	1510330	They were emitting
1511150	1512110	a stream of
1512110	1513110	TCP segments
1513710	1514950	from an address
1514950	1515990	that was not their own
1515990	1516810	so they would not have
1516810	1517690	received your ACKs
1517690	1518830	had you sent any.
1518830	1519810	And they were successfully
1519810	1521410	getting spam out.
1521430	1521810	And then
1521810	1522950	there was a big
1522950	1523770	scare about that
1523770	1524650	and so now everyone
1524650	1525530	uses a random
1525530	1526530	initial sequence
1526530	1527430	number.
1527690	1528530	If you were
1528650	1529210	a Linux user
1529210	1529730	and you saw
1529730	1530450	devrandom
1530450	1531450	come into existence
1531450	1532290	that was the year
1532290	1533710	and that was the reason.
1536590	1538330	So, basically
1538330	1539010	they assumed
1539010	1539710	everyone else
1539710	1540710	would do a good job
1540710	1541830	and would be on
1541830	1543150	the same side.
1543630	1544730	And they're not.
1544850	1545510	There are a lot
1545510	1546470	of people out there
1546470	1547970	who are
1548550	1549130	stupider
1549130	1550870	than you
1552310	1553470	or malevolent
1554290	1554870	and
1554870	1555510	even
1555510	1555790	it's
1555790	1556210	bizarre
1556210	1557070	to see this
1557070	1557490	protocol
1557490	1557890	and it's what
1557890	1558490	most traffic
1558490	1558950	on the internet
1558950	1559490	is.
1559490	1560430	It's TCP.
1560510	1561190	And it's bizarre
1561190	1561670	to see this
1561670	1562030	protocol
1562030	1562990	even still in
1562990	1563830	use.
1564170	1564930	It's very easy
1564930	1565870	for, in fact,
1565870	1566310	I remember
1566310	1567890	some marketing
1567890	1568370	literature
1568370	1569090	back in
1569090	1569770	maybe mid
1569770	1570870	90s.
1570910	1571530	Somebody was
1571530	1573210	offering a
1573210	1574130	TCP stack
1574130	1575490	for probably
1575490	1575710	Windows, I
1575710	1577870	don't know,
1583510	1584510	whose claim
1577870	1578230	to fame
1578230	1578650	was that it
1578650	1578950	was more
1578950	1579770	aggressive.
1580030	1581090	It would get
1581090	1581490	more than
1581490	1581890	its fair
1581890	1582930	share of
1582930	1583830	the path
1583830	1584690	bandwidth.
1584730	1585010	And it
1585010	1585450	would cause
1585450	1586070	other TCP
1586070	1586630	flows that
1586630	1588750	were sharing
1588750	1589130	the same
1589130	1589870	path to
1589870	1590890	back off.
1592790	1593470	And, you
1593470	1594110	know, naturally
1594670	1595430	some people
1595430	1596190	actually paid
1596190	1596750	for that,
1596750	1597250	bought it,
1597250	1597790	installed it,
1597790	1598150	got some
1598150	1598650	benefit out
1598650	1598990	of it, I
1598990	1599750	assume.
1599750	1600830	But we know
1600830	1601410	that if everybody
1601410	1602310	acts that way,
1602310	1602870	then actually
1602870	1603470	you'll end up
1603470	1604310	overflowing all
1604310	1604870	the lines and
1604870	1605450	everybody will
1605450	1606150	get less.
1606150	1606710	This is kind
1606710	1607070	of like the
1607070	1607490	prisoner's
1607490	1608210	dilemma.
1609470	1610410	But still,
1610410	1610870	you have to
1610870	1611330	wonder what
1611330	1611650	was in
1611650	1612010	the minds
1612010	1612250	of the
1612250	1612610	designers
1612610	1612950	of this
1612950	1613790	protocol.
1614630	1614990	Building
1614990	1615470	things that
1615470	1615790	work in
1615910	1616290	a lab
1616290	1617150	is an
1617150	1617850	achievement.
1617850	1618070	Building
1618070	1618610	things that
1618610	1619010	can make
1619010	1619310	it from
1619310	1619690	the lab
1619690	1619990	into the
1619990	1620450	real world
1620450	1620830	and still
1620830	1621610	be useful
1621610	1622710	is a
1622710	1623150	greater
1623150	1624670	achievement.
1624670	1624990	And we
1624990	1625910	should strive
1625910	1626210	for the
1626210	1626650	greater
1626650	1629670	achievement.
1629670	1631730	There are
1631730	1632390	a number
1632390	1632870	of codecs
1632870	1633410	that you
1633410	1633870	can use
1633870	1635530	for voice
1635930	1636110	over IP
1636110	1636630	and a
1636630	1637910	couple of
1637910	1638510	them are
1638510	1639070	fixed in
1639070	1639350	the amount
1646070	1647070	of bandwidth
1639350	1639750	that they
1639750	1640190	use.
1640190	1640430	In other
1640430	1640930	words,
1640930	1641550	whether you're
1641550	1642110	talking or
1642110	1642610	not, they
1642610	1643030	are sending
1643030	1643510	the same
1643510	1644010	number of
1644010	1645170	packets and
1645170	1645570	the packets
1645570	1645950	have the
1645950	1646690	same size
1646690	1646970	and the
1646970	1647190	same
1647190	1647490	inter
1647490	1647750	packet
1647750	1648730	gap.
1648850	1649130	And the
1649130	1649710	reason is
1649710	1650150	if they
1650150	1650790	only send
1650790	1651450	packets when
1651450	1651650	you're
1651650	1652350	talking and
1652350	1652590	if they
1652590	1653090	turn your
1653090	1653610	silence
1653610	1654330	into a
1654330	1654910	lack of
1654910	1655810	packets,
1655810	1656490	then they
1656490	1656870	will end
1656870	1657590	up competing
1657590	1658410	with TCP
1658410	1658750	when you
1658750	1659430	do finally
1659430	1660530	start talking.
1660530	1660950	So what they
1660950	1661350	want to do
1661350	1661890	is compete
1661890	1662650	with TCP
1662650	1663330	the whole
1663330	1663750	time, even
1663750	1664090	when you're
1664090	1666070	not talking.
1666070	1666610	Okay?
1666610	1667470	I understand
1667470	1668190	everybody wants
1668190	1668670	to adapt
1668670	1669270	to other
1669270	1669830	people's
1669830	1670610	mistakes,
1670610	1671010	but could
1671010	1671330	this not
1671330	1671810	have been
1671810	1672350	foreseen?
1677380	1678920	There is a
1678920	1679860	mantra in
1679860	1680460	the ivory
1680460	1681100	tower of
1681100	1682000	the IETF
1682000	1682720	that stateless
1682720	1684100	is good.
1684100	1684360	They don't
1684360	1684880	want to put
1684880	1685260	state in
1685260	1685700	the routers
1685700	1685980	in the
1685980	1686180	middle.
1686180	1686600	That was
1686600	1687200	something
1687200	1688220	X25 and
1688220	1688460	the rest
1688460	1689340	of the
1689340	1689980	ISO protocols
1689980	1690340	did.
1690340	1690680	They didn't
1690680	1691060	want to do
1691060	1691420	that.
1691420	1692080	They wanted
1692080	1692660	to keep
1692660	1692980	all state
1692980	1693760	at the
1703540	1704540	end points.
1693760	1696320	Now, it
1696320	1696820	turns out
1696820	1697420	that with
1697420	1698040	route caching
1698040	1698420	and all
1698420	1698880	the other
1698880	1699340	things that
1699340	1699640	modern
1699640	1700220	routers have
1700220	1700720	to do in
1700720	1701040	order to
1701040	1701460	run at
1701460	1702600	10 gigabit
1702600	1703560	line rates,
1703560	1704140	you have
1704140	1704940	state in
1704940	1705260	those
1705260	1705820	routers
1705820	1706880	anyway.
1707320	1707920	And so
1709240	1710040	it might
1710040	1710400	have been
1710400	1711240	worthwhile to
1711240	1711800	get somebody
1711800	1713160	to come
1713160	1713640	in and
1713640	1714160	try and
1714160	1714880	separate out
1714880	1715380	religion
1715380	1715800	from
1716700	1717380	engineering
1717380	1718700	requirements in
1718700	1719100	the original
1719100	1719640	design of
1719640	1719900	all of
1719900	1721080	this stuff.
1726460	1727280	This is
1727280	1727660	near and
1727660	1728260	dear to
1728260	1728800	the hearts
1728800	1729140	of many
1729140	1729500	in this
1729500	1730400	room.
1732540	1733780	For most
1734280	1734620	DSL
1734620	1735600	customers or
1735600	1736440	cable modem
1736440	1737180	customers or
1737180	1737720	other sort
1737720	1738100	of high
1738100	1738460	bandwidth
1738460	1739300	full-time
1740080	1740760	fully
1740760	1741140	connected
1741140	1742860	people from
1742860	1743660	data centers
1743660	1744380	to houses
1744380	1745400	to whatever,
1745400	1746100	you can put
1746100	1747140	any source
1747140	1747640	address you
1747640	1748480	want on
1748480	1749020	your outgoing
1749020	1749920	packets.
1750060	1750540	You can make
1750540	1751180	them come from
1751180	1752260	net 10,
1752260	1752660	you can make
1752660	1753260	them come from
1753260	1753760	the loopback
1753760	1754240	address,
1754240	1754600	you can make
1754600	1755340	them come from
1755340	1756720	net zero,
1756720	1757700	or most
1757700	1758120	appropriately
1758120	1758720	you can make
1758720	1759160	them come
1759160	1759820	from some
1759820	1760620	victim who
1760620	1760860	you would
1760860	1761240	like to
1761240	1762040	destroy.
1762480	1762960	And then you
1762960	1763300	can send
1763300	1763820	them to a
1763820	1763940	lot of
1763940	1764420	people and
1764420	1764680	then the
1764680	1765260	replies all
1765260	1765740	go back to
1765740	1766580	the victim.
1767840	1768960	And this is
1768960	1769840	hard to fix,
1769840	1770460	as it turns
1770460	1770800	out.
1770800	1771360	It sounds
1771360	1772220	simple and
1772220	1772580	there are
1772580	1773480	fixes in
1773480	1773980	various
1773980	1774660	routers and
1774660	1774940	there are
1774940	1775400	all sorts
1775400	1778560	of online
1778560	1779280	documents
1779280	1779760	exhorting
1779760	1780220	people to
1780220	1780640	turn those
1780640	1781300	things on,
1781300	1782000	but it
1782000	1782500	turns out
1782500	1785140	that the
1785140	1785860	equipment most
1785860	1786780	providers are
1786780	1787740	using doesn't
1787740	1788320	quite have the
1788320	1788880	ability to do
1788880	1789480	this and still
1789480	1790040	run at line
1790040	1791180	rate.
1791460	1792080	And the ones
1792080	1793660	that do can't
1793660	1794520	turn it on,
1794520	1794980	because there
1794980	1795780	are some
1795780	1796300	beneficial
1796300	1796900	flows,
1796900	1797340	benevolent
1797340	1797800	flows that
1797800	1798280	depend on
1798280	1798940	this.
1798940	1799520	Third-party
1799520	1800520	TCP that
1800520	1801220	has a
1801220	1801500	satellite
1801500	1801840	leg going
1801840	1802420	in one
1802420	1802900	direction
1802900	1803500	would be an
1803500	1804360	example.
1804360	1804820	It is
1804820	1805360	sometimes
1805360	1805940	necessary to
1805940	1806460	spoof.
1806460	1807380	Well, okay, in
1807380	1808000	my opinion,
1808000	1808780	you can, as
1808900	1809540	a provider,
1809540	1810080	you're a
1810080	1810580	slacker if
1810580	1811280	you use that
1811280	1811580	excuse.
1811580	1812600	You need to
1812600	1813200	find the
1813200	1813660	customers that
1813660	1813980	need that
1813980	1814420	and give
1814420	1814780	them a
1814780	1815440	little bit
1815440	1815960	more latitude
1815960	1816260	and anybody
1816260	1816760	who doesn't
1816760	1817020	need it
1817020	1817560	needs to
1817560	1818040	get no
1818040	1819660	latitude at
1819660	1820340	all.
1820340	1820820	I spend a
1820820	1821580	fair amount
1821580	1822280	of my
1822280	1822740	time tracking
1833460	1834460	down denial
1834460	1835460	of service
1822740	1823900	attacks against
1823900	1824760	DNS servers
1824760	1825940	and my
1826280	1827420	job gets a
1827420	1828820	lot easier
1828820	1830080	when I know
1830280	1830500	that a
1830500	1831400	given flow
1831400	1832140	really does
1832140	1833020	have valid
1833020	1834900	source addresses.
1834900	1835260	What could
1835260	1836020	they have done
1836020	1837900	differently?
1837900	1838420	Well, it all
1838420	1838840	needed to be
1838840	1839480	done on day
1839480	1840020	one because
1840020	1841020	once you
1841020	1842080	sort of
1842080	1842560	let this
1842560	1842980	genie out
1842980	1843360	of the
1843360	1843680	bottle,
1843680	1844220	then it
1844220	1844800	can dictate
1844800	1845600	terms to
1845640	1845960	you.
1845960	1846140	But on day
1846140	1846560	one, they
1846560	1846940	needed to
1846940	1847420	fix it so
1847420	1847840	that source
1847840	1848580	addresses had
1848580	1849200	to be right
1849200	1849560	from the
1849560	1849980	moment they
1849980	1850640	entered your
1851920	1852440	network.
1852440	1852780	At every
1852780	1853300	edge, you
1853300	1854400	know what
1854400	1855240	destination
1855240	1856040	addresses would
1856040	1856940	possibly reach
1856940	1857700	that customer.
1857700	1857900	You could
1857900	1858380	just demand
1858380	1858680	that they
1858680	1859280	only use
1859280	1859940	source addresses
1859940	1860380	that are in
1860380	1860720	the same
1860720	1861540	range.
1861580	1861900	It's not
1861900	1862680	that hard.
1862680	1863160	Even in
1863940	1864700	1980, it
1864700	1864980	was not
1864980	1865940	that hard.
1866420	1866800	You can
1866800	1867320	also make
1867320	1868100	sure at
1868100	1868360	every
1868360	1869020	core router
1869020	1869300	on the
1869300	1869560	internet
1869560	1871280	that, well,
1871280	1871580	maybe you
1871580	1871840	don't know
1871840	1872160	where it
1872160	1872680	came from
1872680	1873260	because by
1873260	1873700	that time
1873700	1874040	you don't
1874040	1874460	know which
1874460	1875080	edge it
1875080	1875380	started
1875380	1876180	at, but
1876180	1876720	you could
1876720	1877840	just demand
1877840	1878380	that the
1878380	1878660	source
1878660	1879220	address be
1879220	1879620	in the
1879620	1879820	routing
1879820	1880240	table
1880240	1881280	somewhere.
1881720	1882280	Just drop
1882280	1882960	it as soon
1882960	1883940	as possible
1883940	1884600	inside the
1884600	1885140	core if it
1885140	1885720	has net
1885720	1886520	zero as
1886520	1887960	its source
1887960	1888580	address or
1888580	1889380	net 10 or
1889380	1890400	what have you.
1890740	1891560	This is not
1891560	1892020	hard.
1892020	1892440	It would
1892440	1892700	not have
1892700	1893020	been hard
1893020	1894120	in 1980.
1894640	1895260	As to
1895260	1895560	why they
1895560	1895920	didn't do
1895920	1896780	it, it's
1896900	1897600	a mystery.
1905520	1906220	Okay, this
1906220	1907760	is my
1907760	1908200	special
1908200	1909460	area.
1910000	1910720	I can
1910720	1911580	rant longer
1911580	1911920	and harder
1911920	1912540	about DNS
1912540	1913100	than any
1913100	1913620	other topic
1913620	1914160	I can think
1914160	1914520	of and
1914520	1915100	maybe more
1915100	1915440	than any
1915440	1915940	other person
1915940	1916280	you can
1916280	1917040	meet.
1918140	1918860	A lot
1918860	1919180	has been
1919180	1919700	done wrong
1919700	1920500	here.
1923600	1924560	They said
1924560	1925180	that .mil
1925180	1925860	and .gov
1925860	1926380	were for
1926380	1927100	military and
1927100	1927600	government,
1927600	1927800	but they
1927800	1928220	really meant
1928220	1928540	their own
1928540	1928980	military
1928980	1929240	and
1929240	1930060	government.
1930140	1930440	Probably
1930440	1931180	meant that
1931180	1932280	com, edu
1932280	1933180	and net
1933180	1933740	were also
1933740	1934780	for American
1934780	1936060	companies,
1936060	1936760	universities
1936760	1937360	and network
1937360	1938580	providers too,
1938580	1939060	but they
1939060	1939580	failed to
1939580	1940160	get that
1940160	1940500	out.
1940500	1943020	This has a
1943020	1944040	distinctly
1944040	1944280	American
1944280	1944520	feel to
1944520	1944900	it, in
1944900	1945280	the same
1945280	1946160	way the
1946160	1946480	telephone
1946480	1946540	system
1946540	1946700	does.
1946700	1947500	I don't
1947500	1947780	know about
1947780	1948060	most of
1948060	1949260	you, but
1957180	1958180	the
1958180	1959180	country
1959180	1960180	code
1949260	1949420	for
1949420	1949620	my
1949620	1949880	cell
1949880	1950080	phone
1950080	1950340	is
1950340	1951540	one.
1952440	1953300	They needed
1953300	1953560	to get
1953560	1954200	ITU
1954200	1954880	involved
1954880	1955580	early,
1955580	1956400	so they
1956400	1957060	were not
1957060	1958240	trying to
1959860	1960520	legislate
1960520	1961000	things that
1961000	1961380	affected
1961380	1962060	national
1962060	1963200	sovereignty.
1963240	1963760	They needed
1963760	1964100	to get
1964100	1964440	the
1964440	1964980	existing
1964980	1965760	organization
1965760	1966900	that had
1966900	1967140	already
1967140	1967580	had that
1967580	1967840	power
1967840	1968400	delegated
1968400	1968780	to them
1968780	1969220	by all
1969220	1970080	those sovereign
1970080	1971080	nations,
1971080	1971380	get them
1971380	1971700	involved
1971700	1972080	early,
1972080	1972660	so the
1972660	1973540	whole
1973540	1974080	argument
1974080	1974660	could be
1974660	1975200	moved to
1975200	1975620	the other
1975620	1976140	guy's
1976140	1976640	backyard
1976640	1977300	instead of
1977300	1977820	having them
1977820	1978340	come visit
1978340	1979320	us.
1980800	1981560	They needed
1981700	1981860	a much
1981860	1982540	better plan
1982540	1983020	for adding
1983020	1984620	new TLDs.
1984620	1986380	Right now,
1987660	1988780	it's ICANN,
1988780	1989060	but for
1989060	1989800	many years,
1989800	1990180	there was
1990180	1990720	an RFC
1990720	1992160	that said
1992160	1993240	that IETF
1993240	1994100	was responsible
1994100	1994920	for determining
1994920	1995660	when a new
1995660	1996160	top-level
1996160	1997000	domain would
1997000	1997520	exist.
1997520	1998200	Well, the
1998200	1999320	E in IETF
1999320	1999820	stands for
1999820	2001080	engineering,
2001080	2001880	and the
2001880	2002340	creation of
2002340	2002780	top-level
2002780	2003380	domains and
2003380	2003860	the selection
2003860	2004220	of which
2004220	2004700	ones ought
2004700	2005200	to exist
2005200	2006080	and who
2006080	2006320	they ought
2006320	2006860	to belong
2006860	2007320	to is
2007320	2007880	not an
2007880	2008280	engineering
2008280	2009380	decision.
2010140	2019180	And you
2019180	2019420	can't
2019420	2020180	say, you
2020180	2020600	know, dot
2020600	2021160	black hat
2021160	2021960	or dot
2022320	2022680	Microsoft
2022680	2023480	or whatever,
2023480	2024280	but I think
2024280	2024600	there ought to
2024600	2025320	be more.
2025320	2025600	I think
2025600	2026000	that this
2026000	2026240	ought to
2026240	2027200	be a
2027200	2027980	more open
2027980	2028600	vehicle,
2028600	2028800	and we
2028800	2028980	ought to
2028980	2029620	be trying
2029620	2030120	a lot of
2030120	2030320	things,
2030320	2030680	and if some
2030680	2030920	of them
2030920	2031440	don't work
2031440	2032060	out, we
2032060	2032380	should say,
2032380	2032740	okay, that
2032740	2033220	didn't work
2033220	2033580	out, we'll
2033580	2034040	delete it
2034040	2034780	now.
2035560	2036160	Had they done
2036160	2037140	that, then
2037140	2038060	the current
2038060	2038680	food fight
2038680	2039280	over who
2039280	2040000	controls the
2040000	2040420	top-level
2040420	2041420	domain space
2041980	2042840	would be, I
2042840	2043240	think, a lot
2043240	2043760	more polite
2043760	2044780	than it is.
2046640	2047360	They also
2047360	2048800	allowed Network
2048800	2049780	Solutions, which
2049780	2050660	is a predecessor
2050660	2052280	of Verisign,
2052280	2052820	to begin
2052820	2053640	charging for
2053640	2055580	domains back
2056400	2056740	when it was
2056740	2057200	still a Navy
2057200	2058060	contract, and
2058060	2058680	there was no
2058680	2059500	provision at all
2059500	2060020	for what we
2060020	2060700	have now, which
2060700	2060940	is the
2060940	2061980	registry-registrar
2061980	2062980	split.
2063060	2063440	And so they
2063440	2064440	let NSI
2064440	2065200	collect $30
2065680	2066180	a year per
2066180	2067360	domain for
2067360	2068340	years, while
2068340	2068760	the whole
2068760	2069280	white-paper
2069280	2070020	process and
2070020	2070500	the whole
2071100	2071980	RRP and
2071980	2072720	EPP and
2072720	2073120	the rest of
2073120	2073500	that stuff
2073500	2074780	got done,
2075680	2076360	we're going
2076360	2076820	to be stuck
2076820	2077400	with
2077400	2078080	Verisign
2078080	2079000	forever as
2079140	2079420	a result
2079420	2079900	of this
2079900	2080880	decision.
2083080	2083800	What could
2083800	2084040	they have
2084040	2084880	done?
2088020	2088820	How did
2088820	2089500	we decide
2090720	2091540	to do,
2091540	2091900	I don't
2091900	2093200	know,
2093200	2093800	international
2093800	2094580	telephony?
2094580	2094820	How did
2094820	2095300	we decide
2095300	2095680	to do
2095680	2096240	international
2096240	2097220	post?
2097700	2098480	Who decided
2098480	2098820	what the
2098820	2099420	settlements would
2099420	2101080	be for,
2101080	2101480	gee, I bought
2101620	2101980	a stamp in
2101980	2102560	this country,
2102560	2102880	but you're
2102880	2103400	delivering it
2103400	2103680	in that
2103680	2104300	country, and
2104300	2105140	vice versa,
2105140	2105600	and I sent
2105600	2105980	you more
2105980	2106420	mail than
2106420	2106800	you sent
2106800	2107260	me.
2107260	2107880	How did we
2107880	2108340	carve up
2108340	2109280	Antarctica?
2109820	2110980	How will we
2110980	2111580	carve up the
2111580	2111860	moon?
2111860	2112280	Well, we're
2112280	2112860	going to get
2112860	2113440	diplomats
2113440	2114020	involved and
2114020	2114420	say, go
2114420	2115400	handle it.
2115920	2116660	For this,
2116660	2116980	we didn't
2116980	2117360	do that,
2117360	2117760	we said,
2117760	2118080	oh, we're
2118080	2118600	engineers,
2118600	2118920	we know
2118920	2119300	how to
2119300	2119920	get this
2119920	2120620	done.
2120800	2121200	The
2121200	2121740	evidence to
2121740	2121880	date
2121880	2122380	suggests
2122380	2123320	otherwise.
2132150	2132870	I have
2132870	2133610	been a
2134430	2135330	member of
2135330	2135470	the
2135470	2136270	IETF,
2136270	2136530	which is
2136530	2137070	to say I'm
2137070	2137430	on some
2137430	2137690	of their
2137690	2137950	mailing
2137950	2138470	lists and
2138470	2138850	I attend
2138850	2139470	some of
2139470	2139570	their
2139570	2139970	meetings
2142250	2143370	for,
2144210	2145050	I think
2145050	2146770	12 years,
2146770	2148310	and I've
2148310	2150010	seen a
2150010	2150790	lot of
2150790	2151450	bad stuff
2151450	2151790	come and
2151790	2154850	go.
2154850	2155730	They built
2155730	2157010	a standards
2157450	2157730	organization
2157730	2158290	originally that
2158290	2158870	was 50
2158970	2159150	friends and
2161610	2162610	a white
2159150	2159850	board.
2160630	2161510	And I
2161510	2161950	think you
2161950	2162190	can
2162190	2163330	imagine,
2163330	2163670	you know,
2163670	2164150	if you
2164150	2164570	could pick
2164570	2165290	50 people
2165290	2165730	on a
2165730	2167050	white board
2167050	2167570	and you
2168110	2168690	could come
2168690	2168950	up with
2168950	2169470	some pretty
2169470	2169990	cool stuff
2169990	2170210	and it
2170210	2170750	would work
2170750	2171030	and it
2171770	2172650	would be
2172650	2172850	successful
2172850	2173170	in the
2173170	2173390	market
2173390	2173750	and so
2173750	2175310	on.
2175310	2175610	And so
2175610	2176010	they did
2176010	2176470	that because
2176470	2176650	they knew
2176650	2176930	that it
2176930	2177310	would work
2177310	2177530	and it
2177530	2177750	would be
2177750	2178250	successful
2178250	2178530	and it
2178530	2178790	would be
2178790	2179210	fun and
2179210	2179450	they had
2179450	2179690	many
2179690	2179990	fine
2179990	2180310	lunches
2180310	2180470	and
2180470	2180710	dinners
2180710	2181570	around it.
2182410	2182770	They
2184490	2185210	planned for
2185210	2185490	global
2185490	2186350	domination.
2186350	2186730	They wanted
2186730	2187070	it to be
2187070	2187490	the case
2187490	2188070	that IP
2188070	2188830	would beat
2188830	2189630	ISO.
2189850	2190170	They did
2190170	2190630	not ever
2190630	2190870	want to
2190870	2191130	have to
2191130	2191330	run
2191330	2192010	TP4
2192010	2192970	or X25
2192970	2193450	or anything
2193450	2193950	like that
2193950	2194270	in their
2194270	2194710	enterprise
2194710	2195790	or ATM.
2196250	2196910	So they
2196910	2197250	really
2197250	2199330	thought hard
2199330	2199790	about how
2199790	2200070	to make
2200070	2200490	sure this
2200490	2200970	would be
2200970	2201130	the
2201130	2201430	dominant
2201430	2202610	technology.
2202610	2203050	But what
2203050	2203430	they didn't
2203430	2204310	realize is
2204310	2205650	if you
2205650	2206210	span the
2206210	2206730	globe,
2206730	2207490	then people
2207490	2207930	from all
2207930	2208290	over the
2208290	2208710	globe are
2208710	2209010	going to
2209010	2209330	want to
2209330	2209850	come and
2209850	2210790	help with
2210790	2211010	this
2211010	2211330	protocol
2211330	2211770	development
2211770	2212790	process.
2212790	2213110	They will
2213110	2213410	have their
2213410	2213970	own ideas
2213970	2214650	and you
2214650	2214970	will have
2214970	2215390	to have
2215550	2215850	a standards
2215850	2216470	organization
2216470	2216910	that is
2216910	2217570	capable of
2217570	2217850	letting
2217850	2218290	all those
2218290	2218870	people in
2218870	2219390	but not
2219390	2219890	turning the
2219890	2220290	discussion
2220290	2221570	to mud.
2221990	2222730	They had
2222730	2223150	no such
2223150	2223930	plan.
2223930	2224270	They still
2224270	2224690	have no
2224690	2224890	such
2224890	2225290	plan.
2225290	2225410	They
2225410	2225930	periodically
2225930	2226690	reform it
2227570	2228330	based on
2228330	2229510	hindsight.
2230970	2231270	In other
2231270	2231730	words, they
2231730	2232410	say how
2232410	2232750	can we
2232750	2233110	avoid the
2233110	2233790	problems of
2233790	2234490	recent years
2234490	2234870	in what
2234870	2235150	we do
2235150	2235950	next.
2236290	2236790	But they
2236790	2237230	never asked
2237230	2237770	the question
2238270	2238910	how can
2238910	2239150	we get
2239150	2239650	back to
2239650	2239930	the good
2239930	2240610	old days.
2240610	2240870	How
2240870	2241110	could
2241110	2241550	something
2241550	2242350	like
2242350	2243570	DNS or
2243570	2244390	SMTP
2244390	2245050	possibly
2245050	2246510	survive the
2246510	2247010	current
2247010	2247710	IETF
2247710	2248610	process or
2248610	2249210	the one we
2249210	2249590	plan to
2249590	2250030	have after
2250030	2250370	the next
2250370	2251270	reform.
2251310	2251970	That's not a
2251970	2252710	litmus test
2252710	2253070	they use.
2253070	2253610	All they're
2253610	2254130	trying to
2254130	2254890	do is
2254890	2255110	fix
2255110	2255270	whatever
2255270	2255830	they think
2255830	2256150	is wrong
2256150	2256830	looking at
2256830	2256990	the
2256990	2257170	previous
2257170	2258190	year or
2258310	2258570	two.
2258570	2258670	As a
2277380	2278380	result,
2258670	2258710	the
2258710	2259390	reform is
2259390	2259910	continuous
2259910	2260310	and
2260310	2261570	ineffective.
2269800	2270600	The
2270600	2270800	Internet
2270800	2271380	activities
2271380	2272100	board is
2272100	2272620	logically
2272620	2273720	separate from
2273720	2275100	the IETF
2275100	2275600	although it
2275600	2276040	is the
2276040	2276420	titular
2276420	2277020	head of
2277020	2278480	IETF.
2278500	2278700	There's
2279320	2279600	a whole
2279600	2280120	hairball
2280120	2280480	of
2280480	2281500	organizations
2281500	2282100	starting
2282100	2282340	with
2282340	2283460	I.
2283620	2284420	IAB
2284420	2285280	is where
2285280	2285600	the
2285600	2286160	architectural
2286160	2286880	vision is
2286880	2287340	supposed to
2287340	2288320	come from.
2288420	2288980	These people
2288980	2290880	are selected
2290880	2291700	by a
2291700	2292220	nominations
2292220	2292900	committee of
2292900	2294500	the IETF
2294500	2295240	body.
2295240	2295780	I've been
2295780	2296200	asked to be
2296200	2296840	on that
2296840	2297220	committee a
2297220	2297600	couple of
2297600	2298060	times and
2298060	2300800	have said
2300800	2301140	no.
2301140	2301280	In other
2301280	2301960	words, it
2301960	2302500	is selected
2302500	2302840	by people
2302840	2303360	like me
2303360	2303540	who said
2303540	2304280	yes, I
2304280	2304940	will help
2304940	2306420	make those
2306420	2306740	selections.
2314160	2315160	The IAB
2306740	2307200	has in
2307200	2307560	the past
2307560	2308140	said that
2308140	2308820	firewalls
2308820	2309120	were an
2309120	2309620	unnecessary
2309620	2310500	evil.
2310500	2310660	And that
2312960	2313860	hosts just
2313860	2314120	ought to
2314120	2315320	be hardened.
2315480	2316200	Well, okay,
2316200	2316620	you can say
2316620	2317140	that, but
2317140	2317680	that's not
2317680	2318160	what people
2318160	2319020	are doing.
2319540	2319940	They said
2319940	2320340	that NAT
2320340	2320760	was an
2320760	2321220	unnecessary
2321220	2322340	evil and
2322340	2322780	that rather
2322780	2323260	than
2323260	2324200	promote NAT
2324200	2324540	and come
2324540	2324840	up with
2324840	2325240	firewall
2325240	2325920	traversal
2325920	2326700	protocols and
2326700	2327220	just make
2327220	2327860	everybody use
2327860	2328260	NAT and
2328260	2328680	only have
2328680	2329240	real addresses
2329240	2329540	in the
2329540	2330060	core which
2330060	2331220	worked,
2331220	2331800	they said,
2331800	2332180	no, we
2332180	2332560	just think
2332560	2333320	NAT is a
2333320	2333920	bad design
2333920	2334160	and we're
2334160	2334500	going to
2334500	2334720	come up
2334720	2335460	with
2335460	2335800	IPv6
2335800	2336260	and that
2336260	2337060	will kill
2337060	2337480	NAT.
2337480	2337600	And once
2337600	2338040	again, I
2338040	2338640	have to
2338760	2339020	say that
2339020	2339480	is a
2354580	2355580	fine
2355580	2356580	philosophy
2339480	2340000	to have,
2340000	2340340	but that's
2340340	2340800	not what
2340800	2341180	people are
2341180	2341900	doing.
2345880	2347100	Tony Lee,
2347100	2347480	who was
2347480	2348300	then at
2348300	2348700	that time
2348840	2349080	a Cisco
2349080	2349720	employee,
2349720	2350060	made the
2350060	2350380	famous
2350380	2350800	comment
2350800	2351040	about
2351040	2351760	IPv6,
2351760	2351980	he said
2351980	2352340	it's too
2352340	2352580	little
2352580	2352820	too
2352820	2353680	soon.
2354040	2354480	We don't
2354480	2354800	need it
2354800	2355380	yet and
2355380	2355700	the things
2355700	2356160	we need
2356160	2356800	are way
2356800	2357580	bigger and
2357580	2358200	the list
2358200	2358580	is way
2358580	2359120	longer than
2359120	2359880	what people
2359880	2360360	are planning
2360360	2362040	on providing,
2362740	2363460	but that's
2363460	2363740	what the
2363740	2364600	IAV decided
2364600	2365460	on and it
2365460	2365980	was there
2365980	2366340	that the
2366340	2366880	decision was
2366880	2367600	made.
2368980	2370040	And those of
2370040	2370380	you in
2370380	2371060	business know
2371060	2371400	what the
2371400	2371720	feasible
2371720	2372520	alternative is
2372520	2372820	in this
2372820	2373140	case.
2373140	2373500	You find
2373500	2373800	out who
2373800	2373940	the
2373940	2374300	customer
2374300	2375000	is, ask
2375000	2375300	them what
2375300	2375660	they want
2375660	2376020	and build
2376020	2376300	it for
2376300	2377480	them, rather
2377480	2378620	than saying
2378620	2379240	yes, we are
2379240	2379800	in the
2379800	2380380	ivory tower
2380380	2380820	and we will
2380820	2381200	tell you
2381200	2381660	whether you
2381660	2381860	need
2381860	2382440	NAT or
2382440	2383180	not.
2385000	2385580	Foolishness on
2385580	2386540	its face.
2387040	2387380	And yet
2387380	2387800	they're still
2387800	2388460	defending that
2388460	2389240	policy.
2393860	2394300	ICANN,
2394300	2394500	and I'm
2394500	2394840	down to my
2394840	2395260	last ten
2395260	2396000	minutes,
2396000	2396320	so we'll
2396320	2396640	be doing
2396640	2397080	Q&A
2397080	2397320	out in
2397320	2397560	the hall
2397560	2398380	perhaps.
2399020	2399660	They should
2399660	2400060	never have
2400060	2400540	taken any
2400540	2401340	money from
2401340	2401860	the Department
2401860	2403240	of Commerce,
2403240	2403860	NTIA being
2403860	2404300	the part of
2404300	2404740	the Department
2404740	2405200	of Commerce
2405200	2405800	that faces
2406540	2407120	ICANN,
2407600	2408280	should never
2408280	2408600	have taken
2408600	2409100	money.
2409100	2409500	Once you
2409500	2409880	take money
2409880	2410480	from somebody,
2410480	2410940	they can tell
2410940	2411300	you what to
2411300	2411960	do.
2412280	2412960	They needed
2412960	2413580	to cherish
2413580	2413860	their
2413860	2414300	independence
2414300	2414840	from day
2414840	2415580	one.
2417100	2417840	They also
2417840	2418940	let NTIA
2418940	2419420	guide the
2419420	2420040	charter and
2420040	2420420	the initial
2420420	2421160	board.
2421800	2422540	And, you know,
2422540	2422880	what's up
2422880	2423680	with that?
2423820	2424120	Where did
2424120	2424500	these people
2424500	2425080	come from and
2425080	2425400	why should
2425400	2425680	we be
2425680	2426140	listening to
2426140	2426420	them?
2426420	2427140	That's a
2427140	2427540	question they
2427540	2427880	failed to
2427880	2429260	ask.
2429260	2429520	They used
2429520	2430060	to have a
2430060	2430560	bottom-up
2430560	2431140	at-large
2431140	2431880	sort of
2431880	2432880	representation.
2432880	2433140	They would
2433140	2433600	let people
2433600	2434060	like us
2434060	2434360	vote for
2434360	2434500	who was
2434500	2434780	on their
2434780	2435080	board.
2435080	2435260	They don't
2435260	2435600	do that
2435600	2437320	anymore because
2437320	2437820	they got a
2437820	2438260	board member
2438260	2438700	they didn't
2438700	2439300	like listening
2439300	2442700	to.
2442700	2443100	They needed
2443100	2443700	to see this
2444100	2444480	as a
2444480	2444960	transnational
2444960	2445500	entity,
2445500	2445660	not a
2445660	2446440	U.S.
2446440	2446620	government
2446620	2447080	entity,
2447080	2448560	from day
2448560	2449100	one.
2449100	2449460	The governments
2449460	2449960	they did
2449960	2450360	not include
2450360	2450700	on day
2450700	2451280	one are
2451280	2451660	now forming
2461500	2462500	up their
2462500	2463500	own
2451660	2452220	thing through
2452220	2452400	the
2452400	2452900	I.T.U.
2452960	2454080	mechanism.
2454280	2454500	And it's
2454500	2455120	toothless,
2455120	2455280	but it's
2455280	2455460	going to
2455460	2456000	be a
2456000	2459800	mess.
2459800	2460380	True
2460380	2461000	representative
2462080	2463200	democracy is
2463200	2464020	terrible.
2464020	2464260	And the
2464260	2464760	only thing
2464760	2465460	worse is
2465460	2465920	everything
2465920	2466780	else.
2466780	2467180	And they
2467180	2467480	chose
2467480	2467800	something
2467800	2473350	else.
2473350	2474530	So,
2474530	2475550	I.T.U.,
2475550	2476090	I've
2476090	2476430	mentioned
2476430	2476470	several
2482090	2483090	times,
2476470	2476710	we should
2476710	2476970	have gone
2476970	2477210	to them
2477210	2477550	earlier.
2477550	2477930	That doesn't
2477930	2478330	mean that
2478330	2478610	they had
2478610	2479030	the wisdom
2479030	2479330	and they
2479330	2479530	would have
2479530	2479750	done the
2479750	2480410	right thing.
2480430	2480930	What that
2480930	2481430	really means
2481430	2482790	is they
2482790	2483110	could have
2483110	2484150	been helped.
2484330	2484770	And instead
2484770	2486390	they were
2486390	2486730	allowed to
2486730	2486990	go do
2486990	2487350	their own
2487350	2487770	thing,
2487770	2488070	which was
2488070	2488430	fun to
2488430	2489010	watch when
2489010	2489390	it was
2490310	2491030	foolishness.
2491750	2492230	But it
2492230	2492970	means that
2492970	2493490	we didn't
2493490	2493830	have their
2493830	2494810	help.
2496150	2497070	They should
2497070	2497770	not have
2497770	2498970	allowed Panama
2498970	2500130	to turn
2500130	2501090	telecom
2501090	2501830	access fees
2501830	2502490	into the
2502490	2503270	major source
2503270	2504390	of gross
2504390	2504750	domestic
2504750	2505950	product.
2505950	2506530	But most
2506530	2507150	of Panama's
2507150	2507510	government
2507510	2510030	and services
2510030	2510670	are paid
2510670	2511690	for by
2511690	2512590	people in
2512590	2513090	this country
2513090	2513770	who pay
2513770	2514670	heavy-duty
2514670	2515550	international
2515550	2516530	dialing rates
2516530	2516930	to reach
2516930	2517610	Panama.
2517610	2518350	The result
2518350	2518850	is it's
2518850	2519450	illegal in
2519450	2520030	Panama to
2520030	2520330	run an
2520330	2520910	ISP
2520910	2521830	without a
2521830	2522010	license,
2522010	2522610	and that
2522610	2523170	license
2523170	2523690	dictates that
2523690	2524390	you will
2524390	2524910	block all
2524910	2525930	voice-over
2525930	2528090	IP port
2528090	2528370	numbers.
2528370	2529070	This is
2529070	2529370	kind of
2529370	2529730	incompatible
2529730	2530110	with the
2530110	2530490	way we
2530490	2531110	do things
2531110	2531670	on the
2531670	2531990	Internet,
2531990	2532350	and the
2532350	2532930	ITU
2543610	2544610	needed to
2544610	2545610	be told
2545610	2546610	early on
2533930	2534390	that's
2534890	2535570	crap.
2535570	2536110	Just don't
2536110	2536930	do it.
2537730	2538290	They needed
2538290	2538590	to see
2538590	2539110	telecom
2539110	2539610	as a
2539610	2540070	type of
2540070	2540610	data.
2540610	2540830	Instead,
2540830	2541410	they saw
2541410	2541930	data as
2541930	2542590	a type
2542590	2543050	of
2543270	2543710	telecom.
2543710	2544310	We needed
2544310	2545410	to invert
2546690	2547150	their
2547150	2547530	mindset.
2547530	2547930	They
2547930	2548250	needed to
2548250	2548510	understand
2548510	2549150	that the
2549150	2549330	Internet
2549330	2550290	was a
2550290	2550770	force for
2559930	2560930	democracy,
2560930	2561930	and it
2550770	2551090	wasn't
2551090	2552910	just another
2552910	2553670	way to
2553670	2554690	enrich their
2554690	2555770	members.
2559070	2559630	I'm going
2559630	2560830	to race
2560830	2561250	through some
2561250	2562130	of this.
2563470	2564410	So,
2565910	2566590	here's the
2566590	2567170	hard part,
2567170	2567390	because it
2567390	2568470	involves you.
2571090	2571650	Revolutions
2571650	2572370	come about
2572370	2573170	because people
2573170	2574130	who had
2574130	2574590	the land
2574590	2574810	and the
2574810	2575110	money and
2575110	2575450	the power
2575450	2576190	before you
2576190	2576830	have deals
2576830	2577190	with each
2577190	2577630	other about
2577630	2577890	how they're
2577890	2578070	going to
2578070	2578950	keep it.
2579810	2581070	That's true of
2581070	2581510	revolutions
2581510	2581850	throughout
2581850	2582890	history.
2584350	2585230	It's always
2585230	2585770	about land
2585770	2586390	reform or
2586390	2586850	it's about
2586850	2587270	governance
2587270	2588210	reform or
2588210	2589450	whatever.
2591250	2591850	ICANN is
2591850	2592350	stuck with
2592670	2593310	NTIA.
2593310	2594010	NTIA is
2594010	2594450	stuck with
2594450	2595450	Verisign,
2595450	2597130	but I'm
2597130	2597650	starting to
2597650	2598010	see that
2598010	2598430	that's not
2598430	2599730	our problem.
2600950	2601790	We're not
2601790	2602230	stuck with
2602230	2602690	ICANN.
2602690	2602970	We're not
2602970	2603370	stuck with
2603370	2604670	NTIA.
2606510	2607550	The Internet
2608650	2609610	has done
2609610	2610090	for the
2610090	2610550	world the
2610550	2610930	same thing
2610930	2611350	the fax
2611350	2612030	machine did
2612030	2612890	after Tiananmen
2612890	2613850	Square.
2613850	2614690	It has made
2614690	2615070	it much
2615070	2615750	harder for
2615750	2616510	people to
2616510	2617250	oppress other
2617250	2618170	people.
2618170	2618570	It's made
2618570	2619110	anonymity
2619110	2619950	possible.
2619950	2620510	It's made
2620510	2621010	freedom of
2621010	2621290	speech
2621290	2622370	possible.
2623010	2624450	It is a
2624450	2625130	huge thing.
2625130	2626210	It's not
2626210	2627330	just a
2629370	2630010	technological
2630010	2630190	toy.
2632670	2633670	There are
2630190	2630650	some people
2630650	2631110	out there
2631110	2631370	who are
2631370	2631950	trying to
2631950	2632590	pry this
2632590	2633750	toy as
2633750	2634350	they see
2634350	2634830	it away
2634830	2635630	from ICANN
2635630	2636390	and monetize
2636390	2637090	it.
2642410	2643370	But I
2643370	2643930	guarantee if
2643930	2644210	you go to
2644210	2644710	these people's
2644710	2645170	houses there
2645170	2645330	will be
2645330	2645890	trailers in
2645890	2646290	the woods
2646290	2647070	and right
2647070	2647410	under the
2647410	2647630	kitchen
2647630	2648130	window there
2648130	2648710	will be a
2648710	2649190	pile of
2649190	2649470	Kentucky
2649470	2649750	fried
2649750	2650150	chicken
2650150	2650630	boxes.
2650630	2652730	And what we
2652730	2653030	need is
2653030	2653930	something a
2653930	2654370	lot better
2654370	2654930	than that,
2654930	2655610	maybe even
2655610	2656410	different from
2656410	2656950	DNS,
2656950	2657310	a different
2657310	2657830	way of
2657830	2658250	allocating
2658250	2658750	and using
2658750	2659850	names and
2659850	2660330	addresses that
2660330	2661330	does not
2661330	2662210	rely on
2662210	2662550	governance
2662550	2663770	because the
2663770	2664270	quality of
2664270	2664390	governance
2664390	2664710	in the
2664710	2664970	world seems
2664970	2666070	to be so
2668990	2669830	low.
2669830	2670130	I mentioned
2670130	2670730	on the
2670730	2677630	slide the
2679250	2679810	technology
2678630	2679630	counterculture.
2679810	2680810	Guys in
2680810	2681410	suits don't
2681410	2681910	come up with
2681910	2682390	stuff that's
2682390	2682890	quite that
2682890	2683870	innovative.
2684970	2686090	It comes from
2686090	2686690	rooms like
2686690	2687130	this one
2687130	2687450	full of
2687450	2687970	people like
2687970	2688850	us.
2708800	2710300	Last year I
2710300	2711120	built a
2711780	2712780	barn and
2713820	2714440	it came
2714440	2715440	about several
2715440	2717080	times that
2717080	2717440	one of us
2717440	2717900	on the
2717900	2718300	construction
2718300	2718660	team would
2718660	2719020	come around
2719020	2720400	the corner
2720400	2720920	with some
2720920	2721640	bleeding body
2721640	2722660	part and
2722660	2723320	declare that
2723320	2723540	rule number
2723540	2723940	one had
2723940	2724080	been
2724080	2724980	violated.
2730400	2731360	So humans
2731360	2732480	are animals
2732480	2735400	and most
2735400	2735880	of my best
2735880	2736260	friends are
2736260	2737020	humans.
2737140	2737900	But we
2737900	2738160	have our
2738160	2739120	dark side.
2740160	2740900	We spend
2741440	2741920	a hellacious
2741920	2742360	amount of
2742360	2742840	time trying
2742840	2743160	to figure
2743160	2743600	out how to
2743600	2743980	make other
2743980	2744980	people work
2744980	2745420	so that we
2745420	2745820	won't have
2745820	2746460	to.
2747620	2748580	If we're
2748580	2748920	not doing
2748920	2749340	that, we're
2749340	2749900	probably spending
2750080	2750380	a hellacious
2750380	2750820	amount of
2750820	2751200	time trying
2751200	2751540	to keep
2751540	2752000	other people
2752000	2752400	from doing
2752400	2753500	that to us.
2755660	2756620	And I'm
2756620	2757400	looking forward
2757400	2758420	to a day
2758420	2759300	when we
2759300	2759740	have some
2759740	2760400	other mode
2760400	2761300	of operation,
2761300	2761580	some other
2761580	2762080	thing that is
2762080	2763420	driving us,
2763420	2764120	and I think
2764120	2764440	that the
2764440	2765360	Internet is
2765680	2766200	a wonderful
2766200	2767460	potential tool
2767460	2767960	toward that
2767960	2768720	end.
2771040	2772200	I could ask
2772200	2772640	for a show
2772640	2773320	of hands and
2773500	2773780	a bunch of
2773780	2774100	you would
2774100	2775400	say yes,
2775400	2775980	I started
2775980	2776580	an Internet
2776580	2777280	consulting
2777280	2779360	business in
2779360	2780320	my house,
2780320	2781480	and because
2781480	2781980	I was able
2781980	2782620	to get a
2782620	2783280	domain name
2783280	2784220	and get
2784220	2784940	some bandwidth
2784940	2785520	and whatnot,
2785520	2786440	I was equal
2786440	2787080	to everyone
2787080	2787420	else in
2787420	2787940	that business,
2787940	2788420	and the only
2788420	2788840	thing that
2788840	2789580	mattered was
2789580	2790120	whether I was
2790120	2790560	any damn
2790560	2790780	good at
2790780	2791300	what I did
2791300	2791640	and how
2791640	2792240	much I
2792240	2793760	charged.
2793760	2794800	That's not
2794800	2795100	generally
2795260	2796240	true.
2803980	2804980	I own
2796240	2796640	the land
2796640	2796900	that you
2796900	2797240	would need
2797240	2797540	for that
2797540	2798060	factory,
2798060	2798260	so you
2798260	2798420	have to
2798420	2799140	pay me
2799140	2800720	my tithe.
2800720	2801000	I've been
2801000	2801420	holding on
2801420	2801820	to it for
2801820	2802400	you.
2803100	2803500	The
2803500	2803620	Internet
2803620	2803920	works
2803920	2804500	differently,
2804500	2804680	and it
2804680	2805020	could make
2805020	2805420	humanity
2805420	2805700	work
2805700	2806480	differently.
2808320	2808900	And I
2808900	2809420	love things
2809420	2809860	like free
2809860	2810260	and open
2810260	2810760	source
2810760	2811660	software.
2811660	2812100	I've been
2812100	2812960	doing open
2812960	2813180	source
2813180	2813980	software since
2813980	2814560	before that
2814560	2815080	name was
2815080	2815980	coined.
2816160	2816640	I'm glad
2816640	2817060	that somebody
2817060	2817800	finally came
2817800	2818340	up with a
2818340	2818680	name for
2818680	2819200	what I was
2819200	2819460	doing.
2819460	2821260	That's good.
2821260	2821620	I love
2821620	2822260	the onion
2822260	2822600	router.
2822600	2823060	I'd like
2823060	2823600	to see
2823600	2824340	voice over
2824340	2825200	IP come
2825200	2826400	along and
2826400	2827120	destroy the
2827120	2827380	existing
2827380	2828320	voice dial
2828720	2829560	market.
2829560	2830140	Not because
2830140	2830520	I hate
2840100	2841100	the voice
2830520	2831180	dial market,
2831180	2831880	although frankly
2831880	2832560	it tends not
2832560	2833600	to work well,
2833600	2834820	but because it's
2834820	2835500	an instance of
2835500	2836020	old power
2836020	2836600	structures
2836600	2837760	self-perpetuating
2837760	2838420	themselves at
2838420	2838940	the cost of
2838940	2839440	all of us
2839440	2839680	and our
2839680	2840500	children.
2843120	2844160	And before
2844160	2844560	the Internet
2844560	2845760	can be that
2845760	2846400	force for
2846400	2847160	improving human
2847160	2847980	nature and
2848560	2849360	being that
2850040	2850560	intermediator
2850560	2851080	that I'd like
2851080	2851880	it to be,
2851880	2852460	we have got
2852460	2852880	to get the
2852880	2853520	governance of
2853520	2853900	the Internet
2853900	2854660	out of the
2854660	2855200	hands of the
2855200	2855860	existing power
2855860	2856840	structure.
2857160	2858320	Thank you.
2867060	2868020	I can
2868020	2868600	take a
2868600	2869100	couple of
2869100	2878500	questions.
2878500	2880120	We're exiting
2880120	2880540	on that
2880540	2880680	side.
2880800	2881420	I have a
2881420	2881700	question
2887900	2888740	here.
2888740	2889200	I see
2889200	2891360	OASIS as
2891360	2891920	a competitive
2891920	2892800	standards body
2892800	2893360	for
2893800	2894640	W3C.
2894640	2895260	And I
2895260	2895920	think OASIS
2895920	2896160	is a
2896160	2896240	wonderful
2896240	2897180	thing.
2897180	2897520	For that
2898780	2899780	matter, I
2899780	2900780	think W3C
2900780	2901780	with all
2897520	2897900	its warts
2897900	2898480	is a
2898480	2898880	wonderful
2898880	2899760	thing.
2899760	2900280	If you can
2900280	2900640	imagine what
2900640	2901240	the web
2901240	2901640	standards would
2901640	2902060	look like
2902060	2902340	had they
2902340	2902700	been left
2902700	2903040	in the
2903040	2903280	hands of
2903280	2903940	the
2903940	2904420	IETF,
2904420	2904920	then you
2906200	2906980	should be
2906980	2907140	thanking
2907140	2907400	Tim
2907400	2908160	Berners-Lee
2908160	2911360	for doing
2911360	2912300	what he
2914620	2915500	did.
2920310	2920750	More
2920750	2922010	questions?
2922010	2923470	Here.
2923470	2923710	I think
2927430	2928430	that in
2928430	2929430	Tunis, the
2923710	2924330	WSIS
2924330	2924990	people will
2924990	2925750	say, you
2925750	2926110	know that
2926110	2926570	cat?
2926570	2927290	That cat's a
2927290	2927730	pain in the
2927730	2928150	butt.
2928150	2928890	And us
2928890	2929410	mice, we
2929410	2929710	need to
2929710	2929890	do
2929890	2930170	something
2930170	2930310	about
2930310	2930490	it.
2930490	2930730	One of
2930730	2931050	us needs
2931050	2931330	to go
2931450	2931610	put a
2931610	2931970	bell on
2931970	2932290	that
2932290	2933090	cat.
2933450	2933810	And
2933810	2934150	they're
2934150	2934390	going to
2934390	2934770	look at
2934770	2935250	each
2950710	2951710	other
2951710	2952710	and
2935250	2935490	wonder
2935490	2935770	who's
2935770	2935950	going to
2935950	2936190	do
2936190	2936550	that.
2936550	2936730	But the
2936730	2937310	fact is
2937310	2938190	the
2938190	2938990	United
2938990	2939590	States is
2939590	2939790	the
2939790	2940230	largest
2940230	2941070	payer of
2941070	2941430	dues
2941430	2941950	into the
2941950	2942270	United
2942270	2943150	Nations.
2943270	2943490	And if
2943490	2944030	they say
2944030	2944490	as they
2944490	2944850	did,
2944850	2945970	three weeks
2945970	2947230	ago,
2947230	2947550	we're
2947550	2947730	going to
2947730	2947930	keep
2947930	2948070	the
2948070	2948210	root
2948210	2948910	zone.
2949230	2949810	If they
2949810	2950510	say that,
2950510	2951010	then they
2951010	2951550	mean it.
2951550	2951750	And it
2951750	2951970	doesn't
2951970	2952490	really matter
2952490	2952930	what the
2952930	2953590	UN thinks
2953590	2953870	they can
2953870	2954230	do about
2954230	2954870	it.
2956230	2956810	I don't
2956810	2957210	like it,
2957210	2957530	but that's
2957530	2958450	the fact.
2962250	2962690	Any
2962690	2962870	more
2962870	2963750	questions?
2965170	2965710	Thank you
2965710	2966570	very much.
2968790	2969410	You can
2969410	2970090	see me in
2970090	2970190	the
2970190	2970650	hallway if
2970650	2970790	you have
2970790	2970930	more
2970930	2971730	questions.
2971730	2972830	Thank you.