This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/
[address-policy-wg] 2008-08 (Initial Certification Policy in the RIPE NCC Service Region) going to Last Call
- Previous message (by thread): [address-policy-wg] 2008-08 (Initial Certification Policy in the RIPE NCC Service Region) going to Last Call
- Next message (by thread): [address-policy-wg] 2008-08 (Initial Certification Policy in the RIPE NCC Service Region) going to Last Call
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
John Curran
jcurran at arin.net
Thu May 5 01:19:29 CEST 2011
On May 4, 2011, at 6:40 PM, Martin Millnert wrote: > > It's already been said that in order to get the desired use out RPKI > in terms of preventing youtube hijacking, a network is required to > configure its RPKI-policies strictly. > > Thus, an abuse of the network's CA will then also possibly affect > peers of this network, who may themselves not use RPKI for any number > of reasons. I understand how it would impact the network which has decided to make use of strict RPKI-based route validation (and therefore the network's customers by extension), but can you explain how it would otherwise effect that network's peers? If a network decides to use any specific technology as the basis of its routing architecture (e.g. route reflectors, an out of band ATM network, etc.) and that technology then fails, is compromised or abused, then the network's peers will be impacted in a very similar manner. I am again left trying to understand how the use of RPKI technology for route assurance affects the networks of those who don't use it (other than in the normal manner that all the routing technology is relied on) Thanks! /John
- Previous message (by thread): [address-policy-wg] 2008-08 (Initial Certification Policy in the RIPE NCC Service Region) going to Last Call
- Next message (by thread): [address-policy-wg] 2008-08 (Initial Certification Policy in the RIPE NCC Service Region) going to Last Call
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]