The irony is: by the time we finally are able to address egress filtering (I'd say 5-10y), attacks will have moved almost entirely to Layer 7 (like the Great Ca

The irony is: by the time we finally are able to address egress filtering (I'd say 5-10y), attacks will have moved almost entirely to Layer 7 (like the Great Cannon attack on GitHub last year using gfw).