Re: [Sidrops] [Last-Call] [lamps] Fwd: Last Call: <draft-ietf-sidrops-rpki-has-no-identity-04.txt> (The I in RPKI does not stand for Identity) to Proposed Standard

Russ Housley <housley@vigilsec.com> Fri, 11 March 2022 00:12 UTC

Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.21\))
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <19977.1646505904@localhost>
Date: Thu, 10 Mar 2022 19:12:45 -0500
Cc: Ben Kaduk <kaduk@mit.edu>, SIDR Operations WG <sidrops@ietf.org>, LAMPS <spasm@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <6AE9245C-A721-41B4-AE08-3D7CF680341F@vigilsec.com>
References: <164642447410.28300.14979172722907480601@ietfa.amsl.com> <20220305043121.GH22457@mit.edu> <19977.1646505904@localhost>
To: Michael Richardson <mcr+ietf@sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/34CO7OfOvaOwBtw8VTa0YAyrKVo>
Subject: Re: [Sidrops] [Last-Call] [lamps] Fwd: Last Call: <draft-ietf-sidrops-rpki-has-no-identity-04.txt> (The I in RPKI does not stand for Identity) to Proposed Standard
Precedence: list

Michael:

Did you see the ARTART review on the last-call@ietf.org mail list?  I think you questions were answered by Randy in response to that review.

Russ


> On Mar 5, 2022, at 1:45 PM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> 
> I have read the document.
> I was unaware of it until it was posted.
> 
> It seems like this document is fighting some kind of guerilla fight against
> pressures to provide a higher RoI for doing RPKI.
> 
> I'm personally really annoyed that ARIN has been so restrictive with access
> to the public key that can used to validate the RPKI that originates with
> them.
> 
> } It has been suggested that one could authenticate real-world business
> } transactions with the signatures of INR holders. E.g. Bill's Bait and Sushi
> } could use their AS in the RPKI to sign a Letter of Authorization (LOA) for
> } some other party to rack and stack hardware owned by BB&S. Unfortunately,
> } this is not formally feasible.
> 
> I think that it would be nice if some specific proposals were mentioned.
> 
> I don't really know what:
>  } no proof of termination
> 
> means.
> 
> I feel like this document might better be written by an ARIN or ICANN lawyer
> in a cease and decist kind of fashion, and that really, adults should be
> allowed to do whatever they like with their private keys in the privacy of
> their own HSMs.
> 
> It isn't clear that we gain by publishing this document.
> 
> At some poine in the 1990s, I was assured that Dunn & Bradstreet where going
> to issue certificates useful for business transactions.  That never, AFAIK,
> happened.
> 
> } Government of Elbonia
> 
> citation! citation! :-) :-)
> 
> --
> ]               Never tell me the odds!                 | ipv6 mesh networks [
> ]   Michael Richardson, Sandelman Software Works        |    IoT architect   [
> ]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [
> 
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>           Sandelman Software Works Inc, Ottawa and Worldwide
>

[Sidrops] Last Call: <draft-ietf-sidrops-rpki-has… The IESG
Re: [Sidrops] [lamps] Fwd: Last Call: <draft-ietf… Michael Richardson
Re: [Sidrops] [lamps] Fwd: Last Call: <draft-ietf… Michael Richardson
Re: [Sidrops] [Last-Call] [lamps] Fwd: Last Call:… Russ Housley
Re: [Sidrops] [Last-Call] [lamps] Fwd: Last Call:… Michael Richardson