[Sidrops] Re: Call for WG Adoption of draft-snij-sidrops-constraining-rpki-trust-anchors
Loganaden Velvindron <loganaden@gmail.com> Tue, 27 January 2026 16:22 UTC
Return-Path: <loganaden@gmail.com>
X-Original-To: sidrops@mail2.ietf.org
Delivered-To: sidrops@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id A2BA2ADCB797 for <sidrops@mail2.ietf.org>; Tue, 27 Jan 2026 08:22:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27y-Ys4Y22MG for <sidrops@mail2.ietf.org>; Tue, 27 Jan 2026 08:22:38 -0800 (PST)
Received: from mail-pj1-x1033.google.com (mail-pj1-x1033.google.com [IPv6:2607:f8b0:4864:20::1033]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 26233ADCB792 for <sidrops@ietf.org>; Tue, 27 Jan 2026 08:22:38 -0800 (PST)
Received: by mail-pj1-x1033.google.com with SMTP id 98e67ed59e1d1-34c1d98ba11so4999081a91.3 for <sidrops@ietf.org>; Tue, 27 Jan 2026 08:22:38 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1769530957; cv=none; d=google.com; s=arc-20240605; b=FuZ7cE6zUI5iszDDTIGGF47PWMBqGQmeDHIKitn1b5QErP5IW0gx0efOgrTx5MzuIT PQQtiwD7hA3QZPPhgwrw0ExxTr3FDvU2rWWMkJrQCxk1YfULk9dLYvPl2+mvEf6UA/sm 61ZmeF5eAx62CA5Sfvplai5C/0f8MxkQKBgXx1K0+IHgHq1hWrpfVX5foMBL08VztMIw 0R5ZQ8vPjOhQbmrJHFmL3yWrfABjYTrNg+yw/cME87I10CaIa4CkE1Nc5OAUplgp1kml U+XLfwUGoQ81R6senaEDFaNa6QYBT5sY3WH0ZL7OYyGMCFTjDnEoYVYcM0mtok5MjOvU c+iw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=saEmD1+s0WUNskjT6NU8FGb3MDUGVw5FXWkBVhBg9rI=; fh=N8sweqEpn2CsrhKAErOPl+pE5LRTD8Muh/emgAzgAek=; b=b1due5jPM08p9cw+wK8qnnXpX6l4yV392PC2GK5CCXuiAxtuWIh5HhJqcpvzt7VUo1 bDvbUrmLQXwzFi4emvrwTggCsuio+S9vN94z1scuOd9PytRuhIO6B2VyCLwhUiGr4Pyz l7xe3R4a4aenApInHO/Ovy/nOp1wZmsv1d5xdyYp8wyP+Aht34ZNdmZZMluR3huTBFNx CCxhTNrWb+1LeHpRcGueHtobzo7k8b0Oaw1z0vnU05lAAaao0VvXNigmnBD+aisFVy8c xj6YeOhfXjwPiqS2PCOR/nj/m51OQRlJkIpUvz49Z0dgfDCm5SqTlC6zygRj0iGILj7y UpXA==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1769530957; x=1770135757; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=saEmD1+s0WUNskjT6NU8FGb3MDUGVw5FXWkBVhBg9rI=; b=CNc01ZM9JsLzSlqW7gzbx12h3aPX7IYBx3Wng5GMbQxMQBz4U93WboEHC4oG0sk6T0 JtlOyiyNEcAuIJmuoXomqPSmKoB1hYmmx5eWAC2hsAElBLhEWH33VDJRRMVaTcFxyNxm Szu+EcEbNCCi6AYGS1aflFCr6NX/c1OV+BWvURwAJIy3X95AsV1B7SbEw5buZhAauoZX 5LAWUFEZe9+EuWc/bAUHS+oJ0BzdTY8jEgPunjoWUCtvtTRahYtvE3JWI2jq870JP/NO +t6Lc68YZxscbVQ7nUJpjagL2NeEdoi4YR0r3h7SK02JR+12wrMmuWkOQAMJRdrLGdHh ZnHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1769530957; x=1770135757; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=saEmD1+s0WUNskjT6NU8FGb3MDUGVw5FXWkBVhBg9rI=; b=tIhr43qLwFtZxsxNUeQasPhHic+efJzte4ZOsvkBDXxvnev+Goe5UulHqxVZWBdY6h Ol7+s+eK5PttZPySe5Mc7XdFgf/jZCgRfPvvCGboIwtBjDqaJ/j2vLs2yf90+xq7UvQm wAZPZl8evGLXJONzwDVfcr5DDgWifJnpd0noJb1b5rpk5DdtxigaQ8XRg7r1H0Oj6Rhv vJ5mhPzYz48aTBraH4ZodaQUFd4JmMzalJYB3tTid1db3dxEEPL5H0bu7WUN/DtlhBOI UrCcmPXNQSeaSwEaiOp06JLBcrQ7vi0/1TLbNlY9hoHnixIYlvsAUZfZjJuCk6QYiIP3 OhIQ==
X-Forwarded-Encrypted: i=1; AJvYcCWsuy3K7X1D849Qf13fH574d5d2ZLvK5wmGp1ONuMZi8hCii1yuupfNJ9uVU6kB65UPnr2KPymJ@ietf.org
X-Gm-Message-State: AOJu0YwoYzn5dehTO76hEchnF220zwtZm2RapXTG9ZZ4bYSd9RbTfxEt rlL0EYOSBJix7iJjjFfVcRBsUrh6iHeohJnZC72BkWrcdZa70zrtmurrwmRM37LCvAPKwNKBuv9 qoCtTBLPjMvwnyJ0nJOssF2D4gJ4HMRSFj2tt
X-Gm-Gg: AZuq6aLSrpQmE+fJVnc/iIQcUu3ev+oeIvMWQekKjuLZLtCEbl5GPRiC1bCvQqi5P+Y ULHjWZq3tsuYhB/tkaJO1z+unh3sBsy2GdK7OqyoqYChJ132k8niFYEVmjBewZnCgx0e1Awl2NN KiFHuFIVEVIIZ5b0f4VtDCPtNGCG04eltyg6XNg7n8rjTmlSwEA+ao2COl05PitpwRpSdyB7QvY l7XbXL9fIl7yi84lPbb7QklZYFIO4g6khxMdyXLND24HCsN5p+dhNhEIT0P9I7MgFawPjk0xaN5 snUhFq5XhZoUyvW7nM1sYMeirCEAap5Jgkfa8/Aq
X-Received: by 2002:a17:90b:1dc4:b0:330:6d5e:f174 with SMTP id 98e67ed59e1d1-353fed5cbe2mr2503887a91.20.1769530957128; Tue, 27 Jan 2026 08:22:37 -0800 (PST)
MIME-Version: 1.0
References: <5C5B8F40-6E19-4082-89C0-3DDC0AB6364A@gigix.net> <69149d7c-f362-4335-9648-99da107bc1f1@xt6labs.io> <B11EA004-234A-4FCF-8DC6-1639C6CA3DBF@obtuse.com>
In-Reply-To: <B11EA004-234A-4FCF-8DC6-1639C6CA3DBF@obtuse.com>
From: Loganaden Velvindron <loganaden@gmail.com>
Date: Tue, 27 Jan 2026 20:22:23 +0400
X-Gm-Features: AZwV_QgGwizaKY5fq1moqfPmN-FqTsFuSan-g-RADQib-efd4qdqpFo7yXseyS8
Message-ID: <CAOp4FwSCj2gMq97O+8=iO2tBZ24Q=5E_qQgJwkie4-Ficmq6Hw@mail.gmail.com>
To: Bob Beck <beck@obtuse.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: 5JDOSM3NUHCAGUJWPZH4LGBR4SZEZ74E
X-Message-ID-Hash: 5JDOSM3NUHCAGUJWPZH4LGBR4SZEZ74E
X-MailFrom: loganaden@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: carlos@xt6labs.io, Luigi Iannone <ggx@gigix.net>, SIDRops IETF <sidrops@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Sidrops] Re: Call for WG Adoption of draft-snij-sidrops-constraining-rpki-trust-anchors
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/E-gnBVbVJhcgRr4MFcEagb9q5ac>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>
(Speaking for myself). I think that some further work is needed but I support adoption. On Tue, 27 Jan 2026 at 20:10, Bob Beck <beck@obtuse.com> wrote: > > While I believe using the word “constraint” in this confuses the issue, I support adoption. > > This is no different than the external-to-the-PKI limits to trust that web browsers can put on trusting a certificate today. Codifying that rpki clients can do this to ensure that the expectation that they might, and what the consequences are, is reasonable to do. > > > > > On Jan 27, 2026, at 08:07, Carlos Martinez-Cagnazzo <carlos@xt6labs.io> wrote: > > > > Hi all, > > I believe this is valuable work. I support adopting this draft as a WG item. > > /Carlos > > On 19/1/26 9:46 AM, Luigi Iannone wrote: > >> All, > >> > >> The authors have asked the SIDROPS WG to adopt the document draft-snij-sidrops-constraining-rpki-trust-anchors (https://datatracker.ietf.org/doc/draft-snij-sidrops-constraining-rpki-trust-anchors/) > >> > >> Title: Constraining RPKI Trust Anchors > >> > >> Abstract: > >> This document describes an approach for Resource Public Key > >> Infrastructure (RPKI) Relying Parties (RPs) to impose locally > >> configured Constraints on cryptographic products subordinate to Trust > >> Anchors (TAs). The ability to constrain a Trust Anchor operator's > >> effective signing authority to a limited set of Internet Number > >> Resources (INRs) allows Relying Parties to enjoy the potential > >> benefits of assuming trust - within a bounded scope. The specified > >> approach and configuration format allow RPKI operators to communicate > >> efficiently about observations related to Trust Anchor operations. > >> > >> > >> This email formally opens the two weeks Call for Adoption. > >> > >> If you are supporting adoption, please state so. > >> If you have concerns, please detail them. > >> > >> Please voice your opinion for the SIDROPS WG adoption of this document by 2 February 2026. > >> For the SIDROps WG Chairs, > >> Luigi > >> > >> _______________________________________________ > >> Sidrops mailing list -- sidrops@ietf.org > >> To unsubscribe send an email to sidrops-leave@ietf.org > >> > > -- > > -- > > Carlos Martinez-Cagnazzo > > XT6Labs.IO > > _______________________________________________ > > Sidrops mailing list -- sidrops@ietf.org > > To unsubscribe send an email to sidrops-leave@ietf.org > > _______________________________________________ > Sidrops mailing list -- sidrops@ietf.org > To unsubscribe send an email to sidrops-leave@ietf.org
- [Sidrops] Call for WG Adoption of draft-snij-sidr… Luigi Iannone
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Nick Hilliard
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Tom Strickx
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Tim Bruijnzeels
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Job Snijders
- [Sidrops] Re: Call for WG Adoption of draft-snij-… John Kristoff
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Tony Tauber
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Tobias Fiebig
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Loganaden Velvindron
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Teun Vink
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Job Snijders
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Marco Marzetti
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Carlos Martinez-Cagnazzo
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Bob Beck
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Carlos Martinez-Cagnazzo
- [Sidrops] Re: Call for WG Adoption of draft-snij-… Luigi Iannone