FW: [db-wg] Proposal to deprecate CRYPT-PW authorisation in the RIPE Database

Hi,

On Thu, Oct 05, 2006 at 11:16:54AM +0400, Potapov Vladislav wrote:
> I should say about one more point. For several types of organisations in
> Russia (for example) there are some restrictions about using encryption
> and keys of some sort (for example in the e-mail messages). I think the
> news will bring additional concerns and problems for the organisation (I
> think not only in Russia).

Changing from CRYPT-PW to MD5-PW doesn't incur any operational changes,
and doesn't require key management and crypto of any sort, but *will*
improve security.

Security issues in the IRR DB impact all of us (like "fake objects, 
use that to leverage a routing attack").

I support the proposal to remove CRYPT-PW, as MD5-PW is a better
replacement, which isn't requiring any changes on the day-to-day 
operational side.

Gert Doering
        -- NetMaster
-- 
Total number of prefixes smaller than registry allocations:  98999

SpaceNet AG                    Mail: netmaster at Space.Net
Joseph-Dollinger-Bogen 14      Tel : +49-89-32356-0
D- 80807 Muenchen              Fax : +49-89-32356-234