Re: [sidr] Expected protocols in rpki-rtr

["Montgomery, Douglas" <[e-mail]>]

As a practical matter, what do you think the effect of the "MUST" in the
last sentence will be?

-- 
Doug Montgomery ­ Mgr. Internet & Scalable Systems Research / ITL / NIST






On 8/2/11 1:34 PM, "Paul Hoffman" <[e-mail]> wrote:

>Greetings again. Section 7 of draft-ietf-sidr-rpki-rtr-14 has a list of
>supported transports. However, it does not list the one that some people
>have said that they expect it to be run under sometimes, namely bare TCP.
>If we all know that this is likely to be the case, we should have it
>listed in the document. I propose the following for the end of section 7,
>just before 7.1:
>
>   Caches and routers MAY use unprotected TCP as a transport,
>   even though this provides none of the security protections of
>   the other protocols listed here. Unprotected TCP MUST only be
>   used when there is other forms of trusted security in place.
>
>Of course, we can also just ignore the fact that many users want to do
>this, but being honest in the document might be better than pretending
>otherwise.
>
>--Paul Hoffman
>
>_______________________________________________
>sidr mailing list
>[e-mail]
>https://www.ietf.org/mailman/listinfo/sidr