[ncc-services-wg] RIPE NCC Resource Certification System: Initial Deployment 1 January 2011

<pedantry>

> On 1 January 2011, the RIPE NCC will launch a hosted production
> system, which will allow all LIRs to generate a certificate of
> holdership,

not exactly.  it will allow LIRs to ask NCC to generate a cert for the
LIR's holdings.

> which will be held in a repository maintained by the RIPE NCC. 

along with the LIR's [not so} private keys.  this is sorely broken.

> Network operators will also be able to start making routing decisions
> based on the system as of this date. Further iterations of this system
> will be deployed over the coming 12 months, including the option for
> LIRs to host their own Certificate Authority and generate certificates
> for their own customers.

and hold their own private keys.

randy