This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/ripe-list@ripe.net/
[ncc-services-wg] RIPE NCC Resource Certification System: Initial Deployment 1 January 2011
- Previous message (by thread): [ncc-services-wg] RIPE NCC Resource Certification System: Initial Deployment 1 January 2011
- Next message (by thread): RIPE NCC closed on Friday 24 December 2010
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Wilfried Woeber, UniVie/ACOnet
Woeber at CC.UniVie.ac.at
Wed Dec 1 19:43:18 CET 2010
Randy Bush wrote: > <pedantry> > >>On 1 January 2011, the RIPE NCC will launch a hosted production >>system, which will allow all LIRs to generate a certificate of >>holdership, > > > not exactly. it will allow LIRs to ask NCC to generate a cert for the > LIR's holdings. Regarding the "ask" - one of my private comments regarding the proposed certification policy was to suggest that the NCC, upon request, MUST (in IETF terminology] issue such a certificate. :-) >>which will be held in a repository maintained by the RIPE NCC. > > > along with the LIR's [not so} private keys. this is sorely broken. > > >>Network operators will also be able to start making routing decisions >>based on the system as of this date. Further iterations of this system >>will be deployed over the coming 12 months, including the option for >>LIRs to host their own Certificate Authority and generate certificates >>for their own customers. > > > and hold their own private keys. > > randy Wilfried
- Previous message (by thread): [ncc-services-wg] RIPE NCC Resource Certification System: Initial Deployment 1 January 2011
- Next message (by thread): RIPE NCC closed on Friday 24 December 2010
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]