[175610] in North American Network Operators' Group
Re: ARIN / RIR Pragmatism (WAS: Re: RADB)
daemon@ATHENA.MIT.EDU (Sandra Murphy)
Sat Oct 25 08:57:43 2014
X-Original-To: nanog@nanog.org
From: Sandra Murphy <sandy@tislabs.com>
In-Reply-To: <CAPkb-7BDgjfs6syQiu2QNpacN2JkUBokznDc5PGDiOqpsnm0dQ@mail.gmail.com>
Date: Sat, 25 Oct 2014 08:57:36 -0400
To: Baldur Norddahl <baldur.norddahl@gmail.com>
Cc: nanog list <nanog@nanog.org>, Sandra Murphy <sandy@tislabs.com>
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_A3F23946-C9D8-45AB-BAC5-6FACF85EB592
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
Other RIR based RIRs have the same ability to protect prefixes in their =
realm of control. (See RFC 2725 RPSS)(*) (I think that APNIC is doing =
pretty much as RIPE is.)=20
Even RIPE is not secure for prefixes outside their region. (There's one =
maintainer that anyone can use to register anything for resources =
outside the region - password publicly available, etc.)
Non-RIR based IRRs do not have the ability to tie the register-er to =
authority for the resource, so they have no base on which to build the =
RIPE sort of security.
--Sandy
(*) (yes, I'm listed as an author, but Curtis Villamizer was far and =
away the principal author.)
On Oct 24, 2014, at 7:20 PM, Baldur Norddahl <baldur.norddahl@gmail.com> =
wrote:
> The RIPE IRR is secure. Why not just copy that for the other regions?
>=20
> Baldur
--Apple-Mail=_A3F23946-C9D8-45AB-BAC5-6FACF85EB592
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
iQIcBAEBCgAGBQJUS55AAAoJEHplpQeet0IZOPMQAJnQbrR0se5VMB3pTw8dFOl8
LMBiTiDxprMGSG45FVItPNg5HDsMMhb4ndv0+S8bo7P5WgC5z4TzEuYjgfHSESjO
RIM1Pv3P1jY241hpgVun8tgr64YVuqlK/z/TzEFKXtRFp68wK3S7k9RLasHM9rQJ
6hDe6i+MvXpAY/aKMCjUgEi2PJi9jMnCWXmr7ltKX6iF5DVF7ovgSPHzcFnbaWuX
Ssf4RnENHfJZHVP/JmmbnDwR8bf6zquqpYvDJ8xiZqRg1xLKshuY1Zpd7nfYxD7o
7Gu6sXgzTdr9LnmE/HT82FmxJE9UXH+LPb84kiFYSnCzc2VBBU3SEI9MaVj0M6b8
FMFvsQsSdu5Ai0+MqSqwKl/pNaz+jsHvDXltyXsQf2NbPQTloeJtIXGjWzHidI2I
SwhZsmZ+SIzgyBIc82jtrahm/ASnaGTnJhGMMe1x//oT2HVyjHbEYjeMEa+YOxzb
pNjobNPQK+NCHV29/omxIW/gbn6K+G155Cv1nJq00LPG4px9354PtBvM7R8ewlGH
ZZrfevbRskhTNLu/qD/ECw4yqQ/gNsW/jOMuIe/Fdamw5ZOH3v9y2qTbuRYxivsp
ecEWRVzscdxmWH4BjukF8+lnYuA4dXnbykIz9Qe56ytC8RhgXqUCF7pu8knsqx7s
F6N3GEJx4AgfxU37Cqo+
=Ao7W
-----END PGP SIGNATURE-----
--Apple-Mail=_A3F23946-C9D8-45AB-BAC5-6FACF85EB592--
