Re: [Sidrops] WG-ADOPTION - draft-michaelson-rpki-rta - Ends 12/10/2020 (Dec 10 2020)

[Job Snijders <[e-mail]>]

Dear group,

On Thu, Nov 19, 2020 at 10:04:50AM -0500, Christopher Morrow wrote:
> Howdy WG Folks!
> During our last Face-to-Face meeting the authors of:
>   draft-michaelson-rpki-rta
> 
> presented their document and requested (in meeting and via email to
> the list) a call for Working Group Adoption. The abstract of the
> document is:
> 
>   "This document defines a Cryptographic Message Syntax (CMS) profile
>    for a general purpose Resource Tagged Attestation (RTA), for use with
>    the Resource Public Key Infrastructure (RPKI).  The objective is to
>    allow an attestation, in the form of an arbitrary digital object, to
>    be signed "with resources", and for validation to provide an outcome
>    of "valid with resources".  The profile is intended to provide for
>    the signing of an attestation with an arbitrary set of resources."
> 
> let's have a read-through, think about applicability to SIDR-OPS as it
> relates to the technology we build and operate (technology and
> business intersection), and provide feedback on the list before
> 10/12/2020 (Dec 10th).

I support adoption, and I am willing to try to create a validator
implementation based on OpenBSD's rpki-client. During implementation
feedback in the current document & questions can be shared with the
group, hopefully increasing the document's readability for future
implementers.

A particular use case stands out to me: the PeeringDB platform could use
RTAs to validate ownership of PeeringDB "IX" and "Network" objects,
greatly increasing reliability of its user-submitted database, while
further reducing friction in its onboarding processes.

I would like to recommend the authors to include a copy of the RFC 7942
section 2.1 boilerplate text in the draft (optionally to be removed by
the RFC Editor) to help track implementations. Please make it clear
the 'signer' and 'validator' components are implemented separately.

Congratulations to both APNIC and NLNetlabs for already having
implemented such an incredibly innovative application of the RPKI. I'm
certain RTAs will prove to be useful in a myriad of B2B processes.

Kind regards,

Job