Public Comment: Initial Report on Fast Flux Hosting

[Michael <michael@xxxxxxxxxxxxxxxxx>]

Dear people,

This is a case of blaming the network layer for inappropriate choices made
for the session or application layers.

Basic requirements for authentication and encryption are not being
appropriately graded to the criticality of the application.

Banks and investment companies routinely communicate to customers via email.
 Account management is implemented via web browser with asymmetrical
authentication that relies on human judgment!  The result is that fraud by
Fast Flux pays.

The solution to this problem is to secure the applications with technology
that is appropriate to the level of value and risk.  A hardware-based second
(and/or third) method is required for banking and finance related
applications.

The network is only a pipe.

Michael Holder
TRD Associates, LLC
Redmond, Washington, USA.

________________________________________________
Message sent using UebiMiau 2.7.9