[Sidrops] Roman Danyliw's No Objection on draft-ietf-sidrops-rpki-has-no-identity-06: (with COMMENT)

[Roman Danyliw via Datatracker <[e-mail]>]

Roman Danyliw has entered the following ballot position for
draft-ietf-sidrops-rpki-has-no-identity-06: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-has-no-identity/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thank you to Kyle Rose for the SECDIR review.

** Section 2
   Given sufficient external, i.e. non-RPKI, verification of authority,
   the use of RPKI-based credentials seems superfluous.

Consider rephrasing this sentence to clarify the application of these
credentials.  For example:

Given sufficient external verification of authority (through non-RPKI
mechanisms), the use of RPKI-based credentials is superfluous for <explain the
application>.

** Section 4.
   Attempts to use RPKI data to authenticate real-world documents or
   other artifacts requiring identity are invalid and misleading.

Recommend describing what is mean by “invalid”.  In the cryptographic operation
sense, these signatures are “valid”.  They were just “misleading” in terms of
the degree of authenticity they are providing.