[address-policy-wg] 2008-08 (Initial Certification Policy in the RIPE NCC Service Region) going to Last Call

On 3 May 2011 13:31, Malcolm Hutty <malcolm at linx.net> wrote:

> I am afraid I don't believe this policy should be adopted at this time.

I agree that it should at least re-visited as some of the wider
implications might have been missed in the process as the focus has
been with the technical solution to the 'problem' rather than
potential for 'outside influence'.

I'm also worried that the discussion seem to have moved to an
automated router based implementation rather than an abstracted policy
implementation that an operator can make an informed decision on with
the ability to override it (in the same way that someone would build
per peer filters today). I always understood (possibly wrongly) that
this was about improving the quality of the RIPE (and other IRR) dbs
rather than automating a DoS/LEA toy that *will* cause problems in the
same way fat fingering today causes these issues.

J
-- 

James Blessing
07989 039 476