[164851] in North American Network Operators' Group
Re: RPKI and Trust Anchor question
daemon@ATHENA.MIT.EDU (John Curran)
Tue Aug 6 09:32:33 2013
From: John Curran <jcurran@arin.net>
To: Doug Barton <dougb@dougbarton.us>
Date: Tue, 6 Aug 2013 13:32:13 +0000
In-Reply-To: <52007AAE.3090202@dougbarton.us>
Cc: "nanog@nanog.org List" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Aug 6, 2013, at 12:25 AM, Doug Barton <dougb@dougbarton.us> wrote:
> John,
>=20
> Thanks for the update! It's good to hear that progress is being made.
>=20
> Is there a place where the challenges and solutions are being discussed p=
ublicly? It's interesting that you raise DNSSEC in comparison since the two=
technologies have many similarities. One of the things that made DNSSEC su=
ccessful was the wide-ranging public discussion that not only led to concer=
ns that would likely not have been uncovered otherwise, but also solutions =
to those and other problems.
Agreed. I believe that it is necessary to do the same with respect to=20
any global trust anchor architecture for RPKI, and believe that much of
this needs to take place initially in the IETF sidr working group. The
first step of that process is to have an initial draft doc for discussion
(which is presently being written by the ICANN/RIR technical folks.)
FYI,
/John
John Curran
President and CEO
ARIN