rpki vs. secure dns?

Florian Weimer fw at deneb.enyo.de
Mon Apr 30 16:04:16 CDT 2012


* Alex Band:

> All in all, for an RPKI-specific court order to be effective in
> taking a network offline, the RIR would have to tamper with the
> registry, inject false data and try to make sure it's not detected
> so nobody applies a local override.

Please keep in mind that this is what's happening with DNS: registries
are not only forced by the courts to remove delegations, but to
delegate names to specific parties.

On the other hand, it's not entirely clear whether this is such a bad
thing.



More information about the NANOG mailing list