BGP Security and PKI Hierarchies (was: Re: Wifi Security)
william(at)elan.net
william at elan.net
Tue Nov 29 02:58:51 UTC 2005
On Mon, 28 Nov 2005, Randy Bush wrote:
>
>> proof of identity
>> S(withRIRkey, AS_A_key, AS_A)
>> or
>> S(withwebofttrustkeys, AS_A_key, AS_A)
>> maybe Randy is saying this is two steps, not an "OR"
>
> S(withRIRkey, someNonRIRidentity, asA)
Good idea. And this "someNonRIRidentity" may actually be another region RIR!
(which solves problem for those involved with multiple RIRs but who prefer
to maintain one primary identity for all regions).
--
William Leibzon
Elan Networks
william at elan.net
More information about the NANOG
mailing list