Re: [sidr] Proposal to remove use of TLS from RPKI provisioning ("up-down") protocol

2010-04-28 Thread Russ Housley
> So, since TLS is not adding anything critical, and creates some > operational issues, I propose that we remove TLS from the protocol. This seems quite reasonable to me. Russ ___ sidr mailing list sidr@ietf.org https://www.ietf.org/mailman/listinfo/si

Re: [sidr] Proposal to remove use of TLS from RPKI provisioning ("up-down") protocol

2010-04-27 Thread Terry Manderson
On 27/04/10 12:24 PM, "Rob Austein" wrote: > I'm writing to propose that we remove all use and mention of TLS from > the RPKI "up-down" protocol described in the (expired) draft > draft-ietf-sidr-rescerts-provisioning. > I second this given my observations from October last year (http://www.

Re: [sidr] Proposal to remove use of TLS from RPKI provisioning ("up-down") protocol

2010-04-27 Thread Seiichi Kawamura
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi > As one of the participants in the testbed, I'd like to chime in here > --getting the TLS config correct is really hard, and troubleshooting > that various failure modes is seriously non-trivial. I'll admit that I'm one of the testbed participant

Re: [sidr] Proposal to remove use of TLS from RPKI provisioning ("up-down") protocol

2010-04-27 Thread Warren Kumari
On Apr 26, 2010, at 10:24 PM, Rob Austein wrote: I'm writing to propose that we remove all use and mention of TLS from the RPKI "up-down" protocol described in the (expired) draft draft-ietf-sidr-rescerts-provisioning. I would like to second this. Background: In June 2007 we had a team of

[sidr] Proposal to remove use of TLS from RPKI provisioning ("up-down") protocol

2010-04-26 Thread Rob Austein
I'm writing to propose that we remove all use and mention of TLS from the RPKI "up-down" protocol described in the (expired) draft draft-ietf-sidr-rescerts-provisioning. Background: In June 2007 we had a team of security reviewers (Steve Bellovin, Steve Kent, and Russ Housley) examine the "up-down