Hi, Terry and Russ,

> 在 2016年9月30日，07:43，Terry Manderson <terry@terrym.net> 写道：
>
> Hi Russ and All,
>
> (wearing just a caucus member hat)
>
>> On 30 Sep 2016, at 12:50 AM, Russ Mundy <mundy@tislabs.com> wrote:
>>
>>>
>>> This is the section which mentions RPKI.  The text now says:
>>>
>>> The Internet Engineering Task Force (IETF) and the RIRs have been working to develop and implement standards for routing security in the form of Resource Public Key Infrastructure (RPKI). At the time of publication the RSSAC was not able to reach consensus on whether RPKI should be included in the evaluation of a candidate operator.
>>
>> I really do not like this wording since, by not ‘endorsing’ the use of RPKI & ROAs, RSSAC is essentially saying that they are negative about the technology.  I strongly object to the negative inference and would rather see no mention of the technology at all than the negative stance inferred in the current wording.
>>
>
> I disagree that this has negative connotations. It's the truth in that RSSAC was not able to reach consensus on this topic, for whatever reason. I like that we are able to say that and am very happy to see such transparency. This doesn’t necessarily mean that RPKI et al is bad, but simply RSSAC has not been able to make a determination yet on the technology in light of the root server system. (and also sends a message that there is indeed another work item here for RSSAC, and some liaison with SSAC)

It seems to me that we might set up a work item (maybe a Work Party) in terms of root system and RPKI in the light of discussions in this thread.

RPKI as yet another fundamental security enhancement, deserves our attentions with regard to safeguarding the routes to the root  servers, since many efforts have been made by the IETF community and RIRs have started to offer Resource Certification services .


Di

ZDNS

_______________________________________________
rssac-caucus mailing list
rssac-caucus@icann.org
https://mm.icann.org/mailman/listinfo/rssac-caucus