[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Captive-portals] time-based walled gardens



I think one difference in public access vs. other access is that in public access (for right or wrong) there are commercial incentives to give you misleading information in order to trick your device into behaving a desired way. 

I agree that (yet another) API might not be making anything easier. Which is why I view RFC7710 + ICMP as a very simple solution, that builds on top of basic, existing, 'building blocks'. DHCP/RA giving a bit of network configuration (which it does today), and ICMP giving you feedback about the fate of your packets (something it does today). The NAS isn't doing anything different -- it is still deciding what gets through and what doesn't. The NAS is probably already sending ICMP for blocked traffic (or it isn't, leading to connection timeouts). Implementing the NAS portion is super simple (and can be implemented in may places in your network - iptables, separate rate limiter, etc).

I view this relatively SIMPLE protocol, which at its core is just telling you the 'truth' (or at least as close as you can get to it, subject to the same risks as ICMP in general) about what happened to your packets and why.



On Mon, Apr 10, 2017 at 6:52 AM, Mikael Abrahamsson <[email protected]> wrote:
On Mon, 10 Apr 2017, Michael Richardson wrote:

All of these things would seem to be doable with the ICMP plus RESTful API.  It seems that the session-ID can deal with these changes, and the validity could indicate things like valid until the end-of-school day.

This is an interesting idea. MIF WG had the idea of PVDs. ALTO WG has the idea about "application-layer traffic optimization", and a server to tell you information. ALTO also has its own discovery mechanism for how to find the ALTO server. CAPPORT has its own proposal to do that. MIF also had PVD-prooposal, now being done in INT-AREA.

To me all these solutions seem to be very closely related in solution-space, and I wish we could all agree on one mechanism that could work for all use-cases.

It seems to me that you're now suggesting yet another one?

--
Mikael Abrahamsson    email: [email protected]


_______________________________________________
Captive-portals mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/captive-portals