Re: [Sidrops] draft-ietf-sidrops-rpki-has-no-identity-00

George:

I do not understand the value of the "nonce check".  CMS allows multiple parallel signatures.  See RFC 4853 for some clarifications, and see RFC 5752 when there are concerns about stripping one of the signatures.

Russ

> On May 11, 2021, at 7:45 PM, George Michaelson <ggm@algebras.org> wrote:
> 
> You can't provide identity inside RPKI. It's forbidden in the profile.
> 
> You can use RTA and RSC to sign over things, which could be assertions
> about identity. RPKI can't "prove" the assertion. But it can associate
> INR with the assertion.
> 
> If you do an identity check out of band, with a public-private keypair
> (for example doing a nonce check) you can use RTA or RSC to sign over
> things which include the public key you just "checked" in some
> unstated, undefined, OOB manner. This binds the INR to the validation
> of that keypair.
> 
> If you want to define the context of use of the INR and the identity
> in the RTA and RSC, how you do that is out of scope for RPKI.
> 
> All your questions about risk and consequence are valid. They're out
> of scope for RPKI.
> 
> I think repeatedly saying "you can't provide identity in RPKI" is a
> bit pointless. Sure: we all know that. You can "bridge" from RPKI to
> identity, if you use some mechanism to say that, and RSC or RTA can
> help you do that, without breaching the RPKI profile which forbids
> directly certifying identity.
> 
> You asked "how" and I tried to say how. I did it badly. well, that
> doesn't help me sell the idea, I get that, but I still think this
> document is a bit pointless. Nobody is trying to say you can certify
> identity directly, inside RPKI. What I wanted the document to say,
> which would make it more useful (I think) is that you CAN associate
> identity and RPKI, if you do it through a mechanism like RTA or RSC.
> 
> What I say about identity, can be said about Geolocation, or any other
> quality you want to associate with INR.  If it is not permitted inside
> RPKI, then assert a declaration outside of RPKI, but sign over it
> using RTA or RSC.
> 
> Yes, bPKI was a stupid thing to use, to say "some PKI which isn't RPKI"
> 
> -G
> 
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops