Re: [Sidrops] Distributing RPKI Validated Cache in JSON over HTTPS

[Di Ma <[e-mail]>]

Randy,

We need to differentiate two uses-cases.

1) Use SLURM file to update validated cache (VRP) over networks within a bailiwick

2) Use SLURM file to broadcast Unallocated and Unassigned RIPE NCC Address Space (ROA0)

As in case 1, I think it is typically sorta inter-cache within an ISP who does not want to see multiple RP instances bringing inconsistency. It just uses one RP to do sync and validation and then uses RUSH to do sync among cache servers in its networks. so the trust can be established easily in this convergent scope of those cache servers.  And share-key for instance can be used as TRUST to employ IPSec to implement authentication of SLURM file transferred between two cache server. 

As in case 2, I think what RPs should trust is who is authoritative for ROA0. Although SLURM file itself has got no protection for data integrity there are workaround. If you are going to download from RIPE NCC you just need to make your browser/client to trust web PKI cert of RIPE. 

In short, I think RUSH is competent for case 1 and could be used for case 2 which needs more discussions in RIPE community :-)

Di 


> 2020年5月31日 16:59，Randy Bush <[e-mail]> 写道：
> 
> di
> 
> i am a bit undlear here.  could you walk me through an example, starting
> with what i trust?  e.g. am i trusting a dns name?  a tls cert ca?  ...
> 
> thanks.
> 
> randy