[allknowingfrog]

Preventing the traffic from being distinguished is the whole premise. Port 23 gets blocked because everyone uses it for telnet, and everyone expects bad actors to know that. If everything moves to 433, we'll end up with a variety of routing systems and no focal point for attack. The only alternative is to disallow port filtering in core internet infrastructure.

We can either have a standard and accept that bad actors will use it against us, or we can accept the chaos that results from abandoning it.

[trashb]

> The only alternative is to disallow port filtering in core internet infrastructure

I think this is an acceptable alternative. In the same way that your mail service is legally required to deliver your mail as part of their universal service obligation (without reading it).