[arin-announce] ARIN Resource Certification Update

Wed Jan 26 03:54:09 UTC 2011

On 1/24/2011 8:52 PM, Roland Dobbins wrote:
> On Jan 25, 2011, at 11:35 AM, Christopher Morrow wrote:
>
>> thinking of using DNS is tempting
>
> The main arguments I see against it are:
>
>
> 2.	The generally creaky, fragile, brittle, non-scalable state of the overall DNS infrastructure in general.

Can you expand on this a bit?

> Routing and DNS, which are the two essential elements of the Internet control plane, are e also its Achilles' heels.  It can be argued that making routing validation dependent upon the DNS would make this situation worse.
>
> The main reasons for it are those Danny stated:
>
> 1.	DNS exists.
>
> 2.	DNSSEC is in the initial stages of deployment.
>
> 3.	There's additional relevant work going on which would make DNS more suitable for this application.
>
> 4.	Deployment inertia.
>

I kind of like the DNS idea. Though some challenges have been raised in 
this thread that warrant further discussion.  In particular the in.addr 
delegation scenarios between RIRs.