This is an update to the draft-ietf-sidr-rpki-tree-validation.
No major changes, mostly clarifications that address comments from Steve Kent,
and additional information as requested at the previous WG session. Hope this
version is more clear and close to final.
Oleg
> On 09 Jul 2016, at
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Secure Inter-Domain Routing of the IETF.
Title : RPKI Certificate Tree Validation by a Relying Party
Tool
Authors : Oleg Muravskiy
> On 02 Jul 2016, at 20:59, Sandra Murphy wrote:
>
> The authors believe that draft-ietf-sidr-rpki-oob-setup-04 ("An Out-Of-Band
> Setup Protocol For RPKI Production Services”) is mature and ready for a
> working group last call.
We use (parts of) it in production.
It
> On Jul 08, 2016, at 05:35, Tim Bruijnzeels wrote:
>
> Stephen Kent comment on -04 of this document saying that it should not
> attempt to update the BGPSec Router Certificate I-D because it's not an RFC,
> just yet. It's currently in IESG Processing. The current document
Dear WG,
After receiving some feedback on the previous version and discussion with
co-authors, this version:
- Does not reject 'over-claiming' EE certificates, but uses VRS-IP/AS there as
well
- Includes text to update ROA validation (in short requires that all prefixes
are in VRS-IP of the
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Secure Inter-Domain Routing of the IETF.
Title : RPKI Validation Reconsidered
Authors : Geoff Huston
George Michaelson