IETF Logo Mail Archive

[Sidrops] Re: Call for WG Adoption of draft-snij-sidrops-constraining-rpki-trust-anchors

Carlos Martinez-Cagnazzo <carlos@xt6labs.io> Wed, 28 January 2026 19:03 UTC

Return-Path: <carlos@cgm-consulting.net>
X-Original-To: sidrops@mail2.ietf.org
Delivered-To: sidrops@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id F10E0AE70B64 for <sidrops@mail2.ietf.org>; Wed, 28 Jan 2026 11:03:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.88
X-Spam-Level:
X-Spam-Status: No, score=-1.88 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.017, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cgm-consulting-net.20230601.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qh5l6qKy3M9S for <sidrops@mail2.ietf.org>; Wed, 28 Jan 2026 11:03:41 -0800 (PST)
Received: from mail-vk1-xa35.google.com (mail-vk1-xa35.google.com [IPv6:2607:f8b0:4864:20::a35]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 88157AE70B5A for <sidrops@ietf.org>; Wed, 28 Jan 2026 11:03:41 -0800 (PST)
Received: by mail-vk1-xa35.google.com with SMTP id 71dfb90a1353d-566360cab07so47892e0c.3 for <sidrops@ietf.org>; Wed, 28 Jan 2026 11:03:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cgm-consulting-net.20230601.gappssmtp.com; s=20230601; t=1769627020; x=1770231820; darn=ietf.org; h=in-reply-to:from:references:to:content-language:subject:reply-to :user-agent:mime-version:date:message-id:from:to:cc:subject:date :message-id:reply-to; bh=I1x0LR22+edWdVb7g7e+W8Sg7/3eIOvbUebo0I/bQs0=; b=JNCmiR9KMQE1B20Wnyl7q2XDZ7u2bE7KSZZi5GzJqB5C/uFGGjG6/ap+7GyDl3YQgM U0sW16cEAaFklQZ+0tsuBFN9qcQTECgqaKOTTX7IY+CgQ12gWHiBzMib6k9wPtgAZ/A7 UYFkeaAxNpFSFQ0elWDYPOwa+vrKX6t20ng+Q9Sz4CzMwd31Yh4Y7FD6Wn2oqhf8kMyH OSh4M+DWdDnpvlO5F9AXTQ14tnLeXBN1lYyEDkSQH73LcpAgayqV5Z0FnWf9+n16X31p Yu8nyZheFP1lM/aTPGX44eSRJ9xaV+UVF/HgCibs/l0QcdJUiqqxtkP2teEtVw/Dp7iQ zm8A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769627020; x=1770231820; h=in-reply-to:from:references:to:content-language:subject:reply-to :user-agent:mime-version:date:message-id:x-gm-gg:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=I1x0LR22+edWdVb7g7e+W8Sg7/3eIOvbUebo0I/bQs0=; b=s2KsSN7Bql+CsDdNf9dd8JQUt1GcVpWYAcVlEqgup5Yg3HK7C8lgPL+RqAnH9XlGY1 Pf1MQMOrm5Y4YKgYI9fzu4QuAYHr7iebUgbBYAdTkY8UyI/d/QEcH6uwsJquu1Zpfbbx rG3O35GEBv9ROxvmeRA2BTJeCcl/IYj+5cKoMK1mQ/A7XD2yTqSt+RT7y0C+ZAPUByk8 M1RPsxs6vHGbFQy+MrI0wYxqhsEdHcJ9nyO6kaI44dK4E0oT/4nvrafJULtgU/KtUQjz lPHFIq9RLtMR1lJNEcwqxX18zca24dr6fk1BIKQjcs4tA1pZXmjU7i4DSz0sveaM1f+K wbjg==
X-Gm-Message-State: AOJu0Yyeg01N7I2eJJv383inOG6PRnL5+zq+i9Y6/ZrrVbojMwnCP85b OfW7gkt92t9tUIy2BAXO4rWA4kLiri1HxSUVdqmvfypuqlCOuY19xTCpeJrPO8J6oV1BaccmSsH qsncK
X-Gm-Gg: AZuq6aLa6p6E4ik4PpuqQ70lT3JKdXU7agn8SawoWMz26u+YKyY8kDA8iVnz8xn1Ojk +duNEKSHdfvmn86Oeln79pyJXfrTTqWEmcO0FiMe2MVT8OaNWPMqnutZlAr3Lz4+Sx73VVdBKpn Xui59aaCe8XCSslDec0mXWWJHcnim22c1CMZFDRt9tc4qi9iduLuGpHOZvz706+CdHQrmevRbvz VQAFqkOgEdvTEKrLxgD1RHT2ujksnQjc/rEA4CzJgq85tmYKu/tbQfy52d9jVtQNZH+n9OYydmQ 6vEZhSjGVq7jcBTU32zgWF23yGhn4DKH5Tijd2D3CXcz5WRPBLv4gdpuzEa/4vFDJ4UAKI5eHNb tDxReYtraRDySYkamjv15K/oaFUS8mZeQnBfb+cAzl0Zpm1aIPTnA+tqpLxzzGz4izjANDiyA5m +OIpX3KaXIGjZ3OwzLE4TGYttJQEzkxtNH08bzkhaTc2UE3vHW/Eve8yzORTACp2zesvK30ge5n +VIRw==
X-Received: by 2002:a05:6122:6610:b0:566:3c22:c131 with SMTP id 71dfb90a1353d-5667958a550mr1931014e0c.10.1769627018937; Wed, 28 Jan 2026 11:03:38 -0800 (PST)
Received: from ?IPV6:2001:13c7:7001:2128:884f:f7c3:8d95:97f? ([2001:13c7:7001:2128:884f:f7c3:8d95:97f]) by smtp.gmail.com with ESMTPSA id 71dfb90a1353d-56685d27657sm880812e0c.21.2026.01.28.11.03.37 for <sidrops@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 28 Jan 2026 11:03:37 -0800 (PST)
Content-Type: multipart/alternative; boundary="------------NfHXydVKzhP60CV0wkMMyBWb"
Message-ID: <3f830461-24cd-40db-af21-1fb58152e39a@xt6labs.io>
Date: Wed, 28 Jan 2026 16:03:35 -0300
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: sidrops@ietf.org
References: <5C5B8F40-6E19-4082-89C0-3DDC0AB6364A@gigix.net>
From: Carlos Martinez-Cagnazzo <carlos@xt6labs.io>
In-Reply-To: <5C5B8F40-6E19-4082-89C0-3DDC0AB6364A@gigix.net>
Message-ID-Hash: OQGIIHBDASTYSD2DJKQCK2664FZCJV23
X-Message-ID-Hash: OQGIIHBDASTYSD2DJKQCK2664FZCJV23
X-MailFrom: carlos@cgm-consulting.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Reply-To: carlos@xt6labs.io
Subject: [Sidrops] Re: Call for WG Adoption of draft-snij-sidrops-constraining-rpki-trust-anchors
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/098vAdLZzGgL4NahI3p_lCLwroA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>

Hi all,

I believe this document is worth adopting as a WG item. I believe this 
addresses a real operational need and for which running code exists.

cheers!

/Carlos

On 19/1/26 9:46 AM, Luigi Iannone wrote:
> All,
>
> The authors have asked the SIDROPS WG to adopt the document 
> draft-snij-sidrops-constraining-rpki-trust-anchors 
> (https://datatracker.ietf.org/doc/draft-snij-sidrops-constraining-rpki-trust-anchors/)
>
> Title: Constraining RPKI Trust Anchors
>
> Abstract:
>   This document describes an approach for Resource Public Key
>    Infrastructure (RPKI) Relying Parties (RPs) to impose locally
>    configured Constraints on cryptographic products subordinate to Trust
>    Anchors (TAs).  The ability to constrain a Trust Anchor operator's
>    effective signing authority to a limited set of Internet Number
>    Resources (INRs) allows Relying Parties to enjoy the potential
>    benefits of assuming trust - within a bounded scope.  The specified
>    approach and configuration format allow RPKI operators to communicate
>    efficiently about observations related to Trust Anchor operations.
>
>
> This email formally opens the two weeks Call for Adoption.
>
> If you are supporting adoption, please state so.
> If you have concerns, please detail them.
>
> Please voice your opinion for the SIDROPS WG adoption of this document 
> by 2 February 2026.
> For the SIDROps WG Chairs,
> Luigi
>
> _______________________________________________
> Sidrops mailing list --sidrops@ietf.org
> To unsubscribe send an email tosidrops-leave@ietf.org

v2.39.1 | Report a Bug | By Email | System Status