BGP Security and PKI Hierarchies (was: Re: Wifi Security)

william(at)elan.net william at elan.net
Tue Nov 29 02:58:51 UTC 2005



On Mon, 28 Nov 2005, Randy Bush wrote:

>
>> proof of identity
>> S(withRIRkey, AS_A_key, AS_A)
>> or
>> S(withwebofttrustkeys, AS_A_key, AS_A)
>>              maybe Randy is saying this is two steps, not an "OR"
>
> S(withRIRkey, someNonRIRidentity, asA)

Good idea. And this "someNonRIRidentity" may actually be another region RIR!
(which solves problem for those involved with multiple RIRs but who prefer 
to maintain one primary identity for all regions).

-- 
William Leibzon
Elan Networks
william at elan.net



More information about the NANOG mailing list