Re: [Sidrops] draft-ietf-sidrops-rpki-has-no-identity-00

[Job Snijders <[e-mail]>]

Dear Randy & Russ,

On Mon, May 10, 2021 at 04:14:42PM -0700, Randy Bush wrote:
> hi folk,
> 
> what do i need to work on here before whining about wglc?  some solid
> constructive wg reviewers would be great.

The current -00 title might distract from the substance of the memo.

Perhaps: "Clarification on Opaqueness of Resource Public Key Infrastructure (RPKI) Identifiers"

Most of the document's content don't appear accessible to newcomers to
the RPKI, it reads as if a lot of prior knowledge is required. The
'Discussion' section is somewhat hard to follow. For example, perhaps
'large operations' might be better as 'large corporations' or
'organizations'? 

The RFC 6480 and RFC 7382 references are useful, but overshadowed by a
(to me) somewhat confusing story about sushi and taco.

The 'Security' section appears to contain some useful clarifications.

> If so, how does one determine if the signature on the real world
> document is still valid?

Would the EE certificates contained in the signed objects not
be periodically validated, including the applicable CRLs?

I would suggest to keep the document in the queue, and enrich it based
on some field experience with RSC. it shouldn't be too long before the
first tests can be conducted with RSC objects.

Kind regards,

Job