search

thegreenwebfoundation / carbon.txt

A proposed convention for making it possible demonstrate that your infrastucture uses green power
Apache License 2.0
83 stars 5 forks source link

Support a way to confirm ip addresses without exposing it, to avoid DDOS attacks #8

Closed mrchrisadams closed 1 year ago

mrchrisadams commented 4 years ago

As Matthew mentions, the shift of the web from relying on transit to relying on CDNs, is making it harder to rely on the public facing IP of sites now for telling if a site is using green power or not:

https://mobile.twitter.com/dracos/status/1268915142621835269

An example is cloudflare - when they were offsetting for their North American network operations, it made things unclear when they were in the middle and handling bandwidth. This was resolved somewhat when they switched over to account for the emissions in all their regions with RECs and so on, but as more people use them, it means its much harder to sell if the origin server was running on green infra.

Listing the real IP might work in a carbon.txt file, but then one of the key ideas behind DDOS protectio, or using a CDN is not exposing this server to attack, and if you know the IP address it's possible to target this server again.

mrchrisadams commented 1 year ago

We have guidance for this now, using domains that refer to information, rather than relying on lookups.

https://carbontxt.org/how

Closing for now,