rpki vs. secure dns?

Randy Bush randy at psg.com
Sun Apr 29 21:39:06 UTC 2012


> As Randy points out, this is not unique to SIDR-defined RPKI.  It is
> applicable to any top-down hierarchical authorization mechanism.
> Security has (non-monetary) costs.

as this derives from address space ownership's dependence on the current
hierarchic administrative allocation model, to fix it merely change the
administrative model or our trust model that depends on that hierarchy.

randy




More information about the NANOG mailing list