On Apr 1, 2013, at 7:24 PM, Danny McPherson <[email protected]> wrote: > On 2013-04-01 14:37, John Curran wrote: > >> The present equivalent for the RIRs would be LEO's engaging in orders >> to change the address holder associated with an IP block, and I am >> happy to say that (at least in ARIN's case) that we have not seen any >> such requests to date. > > That's intuitive given that RIRs don't have an operational role in > connectivity today. E.g., you can do whatever you want, operators don't need > you to route stuff. The crux is that RPKI will change that.
I'm not certain its all that different (particularly not in the early stages of RPKI deployment)... In theory, we could receive an order to reassign an address block to another party (with similar consequences today for those following whois and or irr data.) From past discussions, most law enforcement folks realize that IP address blocks are generally assigned to ISPs and used to serve many, many customers. Except in some interesting corner cases, it's generally insufficiently precise for their needs (as opposed to domain names that serve single business interests) > Heh.. We receive hundreds of court orders (many sealed) a year involving > literally thousands of domain names (and varying actions) and the registrars, > registrants, and resources to which they map are all over the globe. It's > not something we're particularly fond of for an array of reasons, as you can > imagine, but we usually don't have any choice. Fortunately, RPKI will > provide them a more effective alternative ;-) Indeed, there will be some that see RPKI as a possible new approach for such matters. The registry needs to be consistent (i.e. across registration data, Whois publication, and RPKI publication) and we'll certainly seek to prevent RPKI-specific actions as inconsistent with our mission. Also, we have some past success dealing with non-sensical directives, e.g. an order to reassign a single IP address from the midst of a ISP's IP block to another party, but to the extent we get a lawful order to change the address block registered to a party in their jurisdiction, it's going to be fairly challenging situation. Our best bet may be simply continuing to educate law enforcement about the difficulty of attempting granular actions on an IP address block basis (as contrasted to the DNS layer); from your report, it seems that they've gotten the message so far... ;-) FYI, /John John Curran President and CEO ARIN _______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
