Right, sounds like our fundamental assumptions differ. For the great majority of internet users buying more capacity around the globe to sustain a 100Gbps SSDP

Right, sounds like our fundamental assumptions differ. For the great majority of internet users buying more capacity around the globe to sustain a 100Gbps SSDP is not an option. If you run a mildly controversial website, you don't expect to pay much for idle bandwidth. You can go for hosted solutions, but then you will be charged for attack traffic. What I'm proposing is a solution to this problem - how can we make the internet safer for the most common use case. I propose: netflow (to identify the spoofing boxes), flowspec (as stop gap measure), and BCP38 (a fundamental issue) will get us a long way. If we were to design HTTP from scratch we could discuss how to make it truly decentralized. This sounds like an academic discussion though. Your second argument is that DDoS is not a real problem. I don't know how to assess it. Dyn was down. Krebs went down. These are facts. I'm definitely not the guy that shouts "we are all doomed! buy product A or you will go down". All I say is - this is what I see, this is what happened, here are the numbers. Read the data and assess it yourself I guess! - stats for amplifications https://blog.cloudflare.com/reflections-on-reflections/ https://blog.cloudflare.com/reflections-on-reflections/ - numbers for some random syn flood https://blog.cloudflare.com/a-winter-of-400gbps-weekend-ddos-attacks/ https://blog.cloudflare.com/a-winter-of-400gbps-weekend-ddos... - numbers from some unexplained L7 event https://blog.cloudflare.com/the-porcupine-attack-investigating-millions-of-junk-requests/ https://blog.cloudflare.com/the-porcupine-attack-investigati...