stravos:

first: sorry i try not not to do walls of text.  i also tend not to read
them.  life is short.

> can you please elaborate a bit more regarding your concern on the
> concentration of authority? Let me ask you quickly a question: Aren’t
> we doing this already with RPKI system?

somewhat over twenty years ago, when we were designing rpki and its
initial uses, i pushed strongly on this issue.  unfortunately, non-
hierarchic trust research lagged, and still lags, hierarchic by
decades.  so much for web of trust.

the ip resource alocation administrative *authority* is hierarchic,
iana, rirs, lirs, ...  the irr authority is not necessarily a hierarchy.
i trust NTT because they have proven to be a trustworthy peer, not
because APNIC says to.

and lastly, the rpki does provide for and encourage CA distribution.
unfortunately hierarchic, see above.

> it had 5 root TALs only

it was designed to have one, iana

randy

_______________________________________________
connect-wg mailing list
[email protected]
https://lists.ripe.net/mailman/listinfo/connect-wg

To unsubscribe from this mailing list, get a password reminder, or change your 
subscription options, please visit: 
https://lists.ripe.net/mailman/listinfo/connect-wg

Reply via email to