Not a single place
The IAB recommends that encryption be deployed throughout the protocol stack since there is not a single place within the stack where all kinds of communication can be protected.
The IAB acknowledges that there is no presentation layer, nor network intelligence, in the end to end internet protocol stack.
The IUWG architectural proposition is to position additional layers at the fringe on the user side (*). The resulting double stack approach allows a totally encrypted, formatted, intelligent networking interested in confidential inter-semiotic exchanges calling for no change in the existing embedded internet protocol stack, among various possible "interplus" transportation solutions (Ethernet, meshed networks, NDN, SDN, etc.).
The root of this dual architecture is clear:
- information (passive content supporting inter-operations) is transported as data through datagrams.
- intellition (active content, to be processed/negotiated to makes sense and facilitate inter-comprehension) is transported through datagrams corteges as intelligrams.
This means that
- the different datagrams of an intelligram flow can be processed through different successive our simultaneous parallel uncoupled strategies and/or technologies as a way to fight pervasive monitoring through multiple physical and/or virtual channels.
- any other confidentiality solutions, development, proposition, protocol, practices incorporate to the IETF technology will be transparently welcome and/or technically accepted since they will be located at different stacks.
The IUWG architectural proposition is that fringes interoperate on an M&M - masters and masters - multi-stack/multi-stakeholder model, where every processor, whatever the OS and the network, is semantically a master system on an equal footing in their upper-stack, trans-lower-stacks, VGN (virtual glocal network) built after the CLASSes of usable names and the GROUPs of accessible IPs.
PLUS: plugged layers on the user side
