This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/db-wg@ripe.net/
[db-wg] Re: [ncc-services-wg] X.509 authentication in the RIPE Database
- Previous message (by thread): [db-wg] Re: [ncc-services-wg] X.509 authentication in the RIPE Database
- Next message (by thread): [db-wg] Re: [ncc-services-wg] X.509 authentication in the RIPE Database
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Sanjaya
sanjaya at apnic.net
Mon Jul 14 02:48:59 CEST 2003
> > In APNIC we use X.509 certificate to secure MyAPNIC (similar to LIR > > Portal). Having X.509 auth in the whois db would make a better > > integration with this facility. > > Is this then being widely used? No issues with client support and > configurations? Hi Kurtis, We have about 450 certificates issued so far. On Windows platform client support works fine for all browsers (IE, Netscape, Opera, Mozilla). OS-X is ok with Netscape and Opera (Opera in OS-X has some problems in handling .css, but that's not X.509 related). Linux is fine with Netscape and Mozilla. The hardest thing is to get the requestor to send their photo-id! :-) which is required by our Certificate Practice Statement. > > We have also been closely monitoring IETF's PKIX working group > > where there's an effort to certify ASN and internet addresses to > > protect routing announcements. This might eventually affect how > > the public will use the internet routing registry, which is also > > part or our whois database. > > > > We expect X.509 will be used to make certified statements about > > resource allocation as part of S-BGP or SO-BGP and/or wider > > requirements for authoritative statements on resources > > > I am not following the PKIX WG. Do you have any links to > information on this, or how this is planned to be implemented? For the PKIX draft see: http://www.ietf.org/internet-drafts/draft-ietf-pkix-x509-ipaddr-as-extn- 01.txt On S-BGP check this site: http://www.ir.bbn.com/projects/sbgp/ On SoBGP: ftp://ftp-eng.cisco.com/sobgp/index.html Some comments on soBGP/sBGP: http://www.psg.com/~randy/030603.nanog-sxbgp.pdf http://www.nanog.org/mtg-0306/pdf/meyer.pdf Hope this helps. Cheers, Sanjaya > Best regards, > > - - kurtis -
- Previous message (by thread): [db-wg] Re: [ncc-services-wg] X.509 authentication in the RIPE Database
- Next message (by thread): [db-wg] Re: [ncc-services-wg] X.509 authentication in the RIPE Database
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ db-wg Archives ]