rpki vs. secure dns?
Florian Weimer
fw at deneb.enyo.de
Mon Apr 30 21:04:16 UTC 2012
* Alex Band:
> All in all, for an RPKI-specific court order to be effective in
> taking a network offline, the RIR would have to tamper with the
> registry, inject false data and try to make sure it's not detected
> so nobody applies a local override.
Please keep in mind that this is what's happening with DNS: registries
are not only forced by the courts to remove delegations, but to
delegate names to specific parties.
On the other hand, it's not entirely clear whether this is such a bad
thing.
More information about the NANOG
mailing list