<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body dir="auto"> +1 ... in CAPITAL LETTERS too. <div id="AppleMailSignature"> <div>Regards,</div> <div> </div> <div>Peter Thimmesch</div> <div>------------------------------</div> hic sunt dracones</div> <div> On Jun 13, 2018, at 7:12 PM, Job Snijders via db-wg <<a href="mailto:db-wg@ripe.net">db-wg@ripe.net</a>> wrote: </div> <blockquote type="cite"> <div>On Wed, Jun 13, 2018 at 10:56 AM, Lu Heng <<a href="mailto:h.lu@anytimechinese.com">h.lu@anytimechinese.com</a>> wrote: <blockquote type="cite">Internet is one, and this is a general problem of all Afrinic space, just </blockquote> <blockquote type="cite">don’t make it personal please. </blockquote> I didn't intend to make anything personal, so phrased differently: What you highlight is ultimately a problem between AfriNIC members and the AfriNIC organisation. <blockquote type="cite">I hope Afrinic fix it rather soon that way every thing works, until then, </blockquote> <blockquote type="cite">prevent network change is one way of breaking it. </blockquote> I am sympathetic, but RIPE has no obligation to keep a glaring security hole open to accommodate another RIR's lack of expedience. As I mentioned at the microphone at the last DB-WG session, right now I can simply register ALL not-yet-registered IP space in the RIPE NCC database and in doing so lock out anyone else from making any registrations for non-RIPE-managed space. There is nothing in place to stop anyone from doing so, this would immediately fix the security problem. I hope this both illustrates the size of the security hole and the problem of any business process relying on the existence of the hole. Kind regards, Job </div> </blockquote> </body> </html>