BUILDING A BETTER INTERNET
•Download as PPTX, PDF•
1 like•176 views
This document discusses the history and evolution of the internet, including its initial growth factors like layering and trust-based models, weaknesses like incorrect security assumptions and lack of accounting/identification. It covers milestones like encryption use, mobile adoption, and cloud computing. The document advocates for securing key internet protocols to build a more robust network, and outlines Cloudflare's efforts in areas like DNS security, timestamps, and privacy tools. It promotes making emerging technologies more accessible and secure.
Recommended
Recommended
More Related Content
Similar to BUILDING A BETTER INTERNET
Similar to BUILDING A BETTER INTERNET (20)
More from Hacken_Ecosystem
More from Hacken_Ecosystem (13)
Recently uploaded
Recently uploaded (20)
BUILDING A BETTER INTERNET
- 1. // HELPING TO BUILD A BETTER INTERNET John Graham-Cumming CTO, Cloudflare
- 2. Things that made the Internet grow fast // Layering // Wrong Security Model // Trust-based // Cryptography was for governments and IBM // No Accounting // No one saw mobile coming
- 3. Layering
- 5. 5 OSI Model of the Internet
- 12. Cloudflare Confidential Information Aside: how were these values chosen? Top Secret 01101011 11000101 Secret 11010111 10001000 Restricted 10101111 00010011 Confidential 11110001 00110101 Unclassified 00000000 00000000
- 13. Cloudflare Confidential Information XOR Top Secret Secret Restricted Confidential Unclassified 01101011 11000101 11010111 10001000 10101111 00010011 11110001 00110101 00000000 00000000 Top Secret 01101011 11000101 10111100 01001101 11000100 11010110 10011010 11110000 01101011 11000101 Secret 11010111 10001000 01111000 10011011 00100110 10111101 11010111 10001000 Restricted 10101111 00010011 01011110 00100110 10101111 00010011 Confidential 11110001 00110101 11110001 00110101
- 14. Cloudflare Confidential Information XOR Top Secret Secret Restricted Confidential Unclassified 01101011 11000101 11010111 10001000 10101111 00010011 11110001 00110101 00000000 00000000 Top Secret 01101011 11000101 9 8 8 8 Secret 11010111 10001000 9 9 8 Restricted 10101111 00010011 8 9 Confidential 11110001 00110101 9
- 19. Trust-based
- 25. TODO DES
- 27. No one saw mobile coming Not even futurists
- 28. 1979
- 30. 1984
- 31. Cloudflare Confidential Information Case was twenty-four. At twenty-two, he'd been a cowboy, a rustler, one of the best in the Sprawl. He'd been trained by the best, by McCoy Pauley and Bobby Quine, legends in the biz. He'd operated on an almost permanent adrenaline high, a byproduct of youth and proficiency, jacked into a custom cyberspace deck that projected his disembodied consciousness into the consensual hallucination that was the matrix.
- 32. Timeline 1976 Bell/LaPadula multilevel security 1981 IPv4 1981 TCP 1983 DNS 1989 HTTP 1991 BGP PGP First GSM Network 1995 Clipper Chip SSL 2.0 1996 Executive Order 13026 Wrong Security Model Hard to access encryption First Crypto War
- 34. Internet Milestones: JavaScript 1997 JavaScript in Netscape Navigator 4.0 1999 XMLHTTPRequest leads way for rich JavaScript applications 2004 Google launches Gmail
- 35. Internet Milestones: Mobile Apps 2003 Initial adoption of 3G technologies 2007 iPhone 2008 App Store
- 36. Internet Milestones: Cloud Computing 2006 AWS launches EC2 2008 Google App Engine 2010 Microsoft Azure 2009 Alibaba Cloud
- 37. TODO BANDWIDTH
- 38. Speed of Light Speed of Light (m/s) year
- 42. What’s next?
- 43. Secure the protocols DNS ● DNSSEC ● DNS over HTTPS / DNS over TLS HTTP ● HTTPS / HTTP/2 ● TLS 1.3 / ESNI BGP ● RPKI Cloudflare Confidential Information
- 44. HTTP/2: 3 Steps Forward, 1 Step Back Cloudflare Confidential Information HTTP 1.1 HTTP/2 Multiplexing Server Server jquery.js example.css image.png jquery.js example.css image.png jquery.js example.css image.png jquery.js example.css image.png 3 TCP connections 1 TCP connections
- 45. QUIC HTTP Request over QUIC ● Layering breaks down ● HTTP/2 particularly bad in mobile networks Cloudflare Confidential Information
- 46. Default Secure DNSSEC, DNS-over-HTTPS HTTPS and QUIC TLS 1.3 with ESNI BGP with RPKI
- 47. DB Storage The Network Is The Computer Browser VM Browser Origin Origin Services Browser Worker Data Services Origin
- 49. Theme 1: Trust
- 56. RPKI: What are we doing? • Signing our routes • Validating incoming routes • Open sourcing a RPKI Validator ~25% signed! ● DNS ● FREE ● PRO
- 64. All rely on knowing the correct time
- 66. Roughtime New Timestamping Service 1. Build a timestamp chain 2. Make time servers accountable Enables short-lived credentials Reduces spurious certificate errors
- 71. What: Simplify, speed up, and secure read- only access to files stored on the InterPlanetary File System (IPFS), a peer-to- peer protocol for storing content. Bring-your- own-domain with SSL-for-SaaS. Why: Part of Cloudflare’s initiative to make emerging and innovative technologies more accessible, secure, and performant.
- 73. The Cloudflare Onion Service “The first Cloudflare PoP in the Tor Network”