May but not must.
What about certificate that contain IP address set only OR AS number set
only (not both)?

2017-11-28 13:01 GMT+03:00 Geoff Huston <g...@apnic.net>:

> Reject - in the context of resource certificates the resources may contain
> both IP addresses _AND_ AS numbers.
>
>
>
> > On 28 Nov 2017, at 8:04 pm, RFC Errata System <rfc-edi...@rfc-editor.org>
> wrote:
> >
> > The following errata report has been submitted for RFC6487,
> > "A Profile for X.509 PKIX Resource Certificates".
> >
> > --------------------------------------
> > You may review the report below and at:
> > http://www.rfc-editor.org/errata/eid5187
> >
> > --------------------------------------
> > Type: Editorial
> > Reported by: Nikolai Malykh <nmal...@gmail.com>
> >
> > Section: 7.1
> >
> > Original Text
> > -------------
> >      encompass
> >         Given two IP address and AS number sets, X and Y, X
> >         "encompasses" Y if, for every contiguous range of IP addresses
> >         or AS numbers elements in set Y, the range element is either
> >         "more specific" than or "equal" to a contiguous range element
> >         within the set X.
> >
> >
> > Corrected Text
> > --------------
> >      encompass
> >         Given two IP address or two AS number sets, X and Y, X
> >         "encompasses" Y if, for every contiguous range of IP addresses
> >         or AS numbers elements in set Y, the range element is either
> >         "more specific" than or "equal" to a contiguous range element
> >         within the set X.
> >
> >
> > Notes
> > -----
> >
> >
> > Instructions:
> > -------------
> > This erratum is currently posted as "Reported". If necessary, please
> > use "Reply All" to discuss whether it should be verified or
> > rejected. When a decision is reached, the verifying party
> > can log in to change the status and edit the report, if necessary.
> >
> > --------------------------------------
> > RFC6487 (draft-ietf-sidr-res-certs-22)
> > --------------------------------------
> > Title               : A Profile for X.509 PKIX Resource Certificates
> > Publication Date    : February 2012
> > Author(s)           : G. Huston, G. Michaelson, R. Loomans
> > Category            : PROPOSED STANDARD
> > Source              : Secure Inter-Domain Routing
> > Area                : Routing
> > Stream              : IETF
> > Verifying Party     : IESG
>
>
_______________________________________________
sidr mailing list
sidr@ietf.org
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to