[87023] in North American Network Operators' Group
Re: BGP Security and PKI Hierarchies (was: Re: Wifi Security)
daemon@ATHENA.MIT.EDU (william(at)elan.net)
Mon Nov 28 21:59:20 2005
Date: Mon, 28 Nov 2005 18:58:51 -0800 (PST)
From: "william(at)elan.net" <william@elan.net>
To: Randy Bush <randy@psg.com>
Cc: Sandy Murphy <sandy@tislabs.com>, nanog@nanog.org
In-Reply-To: <17291.49326.736824.91919@roam.psg.com>
Errors-To: owner-nanog@merit.edu
On Mon, 28 Nov 2005, Randy Bush wrote:
>
>> proof of identity
>> S(withRIRkey, AS_A_key, AS_A)
>> or
>> S(withwebofttrustkeys, AS_A_key, AS_A)
>> maybe Randy is saying this is two steps, not an "OR"
>
> S(withRIRkey, someNonRIRidentity, asA)
Good idea. And this "someNonRIRidentity" may actually be another region RIR!
(which solves problem for those involved with multiple RIRs but who prefer
to maintain one primary identity for all regions).
--
William Leibzon
Elan Networks
william@elan.net
