Re: [Sidrops] Reason for Outage report (was: Re: ARIN RPKI Service Impact - 12 August 2020 - manifest issue - resolved)

[Martin Hoffmann <[e-mail]>]

Job Snijders wrote:
> 
> The current versions of routinator and ripe ncc's validator have weak
> (lacking) support for manifest handling, there are other issues in
> both softwares that don't yield errors where they should yield errors
> related to manifest handling. Neither implementation handles
> manifests correctly at the moment, so neither software currently can
> be used to confirm the correct publication of manifest related
> data. :-(

To the best of my knowledge, Routinator and the RIPE NCC RPKI Validator
handle manifests according to the specifications laid out in the
relevant standards track IETF documents. I assume that you are referring
to your assessment that all objects published by a CA should be
discarded if any inconsistencies are discovered. While such behaviour
is certainly acceptable under the current specification, not doing so
does not constitute incorrect handling of manifests.

Given that this topic is currently discussed in this very working
group and there wasn’t outright consensus on how software should behave
in these cases, it seems only prudent to delay modifications until
after such consensus has been achieved.

If you have information about other issues these software packages
have with regards to manifest handling -- as you seem to imply there
are multiple issues --, I am sure the maintainers would like to hear
about them.

Regards,
Martin