[routing-wg] Proposed Service Criticality Form

Dear RIPE NCC,

Thanks for offering the opportunity share feedback. I'd like to comment
in individual capacity on the porposal Service Criticality ratings.

Summary: I consider the proposed criticality ratings appropriate for the
         RPKI service.

Elaboration:

1/ Confidentiality
Comment: The purpose of RPKI keys is signing and signature chain
         verification, a purpose very different from encryption
	 (encryption being a prerequisite for to achieve
         confidentiality).

2/ Integrity
Comment: Unauthorized access to private key materials or to interfaces
	 which trigger operations with private key material (such as the
         LIR portal) poses a high risk to operators. It is easy to
	 imagine a multitude of scenarios where a compromise of
         integrity leads to high severity incidents.

3/ Availability
Comment: To ability to issue, revoke, and verify RPKI certificates is a
	 24/7 operational aspect where any downtime stalls business
	 processes. For example, being unable to rectify a misconfigured
         ROA can have very adverse impact on business. A high severity
         rating seems proper.

I'm happy to elaborate on any of the above comments if the comments
raise questions in people!

Kind regards,

Job

On Thu, Dec 15, 2022 at 04:17:48PM +0100, Nathalie Trenaman wrote:
> Dear Colleagues,
> 
> During RIPE 84 in May, we discussed the Service Criticality Framework. We mentioned that we would like the Routing Working Group's input on the criticality rating for the RPKI service.
> 
> Thank you to the Co-chairs for asking the working group for input in June with the original form: 
> https://www.ripe.net/ripe/mail/archives/routing-wg/2022-June/004582.html
> 
> Since we did not receive much feedback so far, we hereby share our proposed completed form with you (see attached PDF). We hope to receive your feedback by 23 December. 
> 
> Kind regards
> Nathalie Trenaman
> RIPE NCC
> 


> -- 
> 
> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://mailman.ripe.net/