RPKI TAs

Randy Bush randy at psg.com
Mon Aug 3 20:58:42 UTC 2020


> I dunno, 'straightforward' to me would mean the ARIN TA is installed by
> default when you install a RPKI Cache Validator implementation

uh, i want a trustable downlad of trust anchors.  and it ain't from
vendors.

but yes, arin's legal dos it typical arin.  but, if i ignore the bumph,
i can connect to their web site dnssec, tls, ... and get a viable TAL
which meets RFC specs.  that seems to me more than one can say for some
other RIRs.

randy



More information about the NANOG mailing list