Software installation tools retrieving ARIN TAL (was: Re: ARIN RPKI TAL deployment issues)

Sat Oct 13 13:35:36 UTC 2018

On 25 Sep 2018, at 3:34 PM, Job Snijders <job at ntt.net> wrote:
> ...
> What I'm hoping for is that there is a way for the ARIN TAL to be
> included in software distributions, without compromising ARIN's legal
> position.
> 
> Perhaps an exception for software distributors would already go a long
> way?
> 
>    "You can include the ARIN TAL in your software distribution as long
>    as you also include an unmodified copy of the
>    https://www.arin.net/resources/rpki/rpa.pdf <https://www.arin.net/resources/rpki/rpa.pdf> file alongside it."
> 
> Kind regards,

Job - 

While not exactly what you seek, we can get a bit closer to the goal – i.e. by eliminating the need for the user installing a software package to first go get the ARIN TAL and put it in the right place prior to running the installation software. 

To that end, the ARIN TAL page <https://www.arin.net/resources/rpki/tal.html <https://www.arin.net/resources/rpki/tal.html>> has been revised with specific guidance –

	Software Installation Tools

	Software installation tools may download the ARIN TAL on behalf of a user after the user has confirmed their acceptance of the ARIN Relying Party Agreement (RPA) on the ARIN website.  This acceptance must require "agreement to the ARIN Relying Party Agreement (https://www.arin.net/resources/rpki/rpa.pdf)" and obtain a non-ambiguous affirmative action by clicking on, or the entry of, a word of agreement (such as  "yes" or "accept")

Example:
Attention: This package requires the download of the ARIN TAL and agreement to the ARIN Relying Party Agreement (RPA) (https://www.arin.net/resources/rpki/rpa.pdf).
Type "yes" to agree, and you can proceed with the ARIN TAL download: yes

We will continue to explore mechanisms for making ARIN’s RPKI repository more accessible to the community, but felt that this interim step could be accomplished promptly and was worth noting in a timely manner to those distributing RPKI software. 

Thanks!
/John

John Curran
President and CEO
American Registry for Internet Numbers

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20181013/acb46145/attachment.html>