[ripe-list] RPKI -> RSPL Objects
- Previous message (by thread): [ripe-list] RPKI -> RSPL Objects
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Randy Bush
randy at psg.com
Thu Apr 25 21:16:56 CEST 2019
> This is exactly why we (lacnic) won’t spin up a new IRR. We’ll > just provide the convenience of generating the RPSL, plus adding what > appears to be the missing feature of AS-SETs > >> my poor second party understanding is that they want irr as well as >> rpki, real irr, not cross-generated, and intend to mash them together >> with other things to form their border trust. as-sets in the irr are cool; use ‘em daily. as-sets in the rpki (or whatever they are called this week), i still do not understand. what is the trust model? if someone is signing an as-set, with what do they sign it, and to what are they actually attesting? since one usually uses the transitive closure of an as-set, and that changes quite frequently, any attestation is bogus. randy
- Previous message (by thread): [ripe-list] RPKI -> RSPL Objects
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]