[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
rpki vs. secure dns?
- Subject: rpki vs. secure dns?
- From: fw at deneb.enyo.de (Florian Weimer)
- Date: Sat, 28 Apr 2012 11:56:51 +0200
- In-reply-to: <[email protected]> (Paul Vixie's message of "Fri, 27 Apr 2012 22:05:17 +0000")
- References: <[email protected]>
* Paul Vixie:
> this seems late, compared to the various commitments made to rpki in
> recent years. is anybody taking it seriously?
The idea as such isn't new, this has been floating around for four
years or more, including at least one Internet draft,
draft-donnerhacke-sidr-bgp-verification-dnssec.
I don't know if we can get RPKI to deployment because RIPE and RIPE
NCC have rather serious issues with it. On the other hand, there
doesn't seem to be anything else which keeps RIRs relevant in the
post-scarcity world, so we'll see what happens.