RE: BGP certificate insanity was: (DHS insanity - offtopic)

2007-04-24 Thread Chris L. Morrow
I think a backup and level-set is in order... The original comment that started this discussion was talking about ONLY signing allocations down from IANA->RIR->LIR->EndSite, only in the whois system and NOT for use in routing devices. The papers/preso's that Sandy pointed to all talk only about u

Re: BGP certificate insanity was: (DHS insanity - offtopic)

2007-04-24 Thread Joe Abley
On 24-Apr-2007, at 11:51, <[EMAIL PROTECTED]> wrote: How can anybody be sure that the random peering tech they are talking to really works for the organisation listed in the whois record? By visual inspection of the e-mail address? Do people really talk to random peering techs? I thought tha

RE: BGP certificate insanity was: (DHS insanity - offtopic)

2007-04-24 Thread michael.dillon
> How can anybody be sure that the random peering tech they are > talking > to really works for the organisation listed in the whois record? By > visual inspection of the e-mail address? Do people really talk to random peering techs? I thought that peering contacts were all set up via face-t

Re: BGP certificate insanity was: (DHS insanity - offtopic)

2007-04-24 Thread Joe Abley
On 24-Apr-2007, at 10:15, <[EMAIL PROTECTED]> wrote: You might try taking a look at the various presentations at NANOG/RIPE/ARIN/ APNIC/APRICOT about the whole idea. Central point: the entity that gives you a suballocation of its own address space signs something that says you now hold it.

RE: BGP certificate insanity was: (DHS insanity - offtopic)

2007-04-24 Thread michael.dillon
> You might try taking a look at the various presentations at > NANOG/RIPE/ARIN/ > APNIC/APRICOT about the whole idea. Central point: the > entity that gives > you a suballocation of its own address space signs something > that says you > now hold it. If the whois directories actually operate