Marco d'Itri <[email protected]> writes: > ARIN believes that they have a right to limit distribution of this RSA > public key (used for verification of routing security): > > https://www.arin.net/resources/rpki/arin-rfc7730.tal
I can see that URL without agreeing to anything. So the only restrictions on redistribution I can think of would be due to copyright. > (This is basically an X.509 subjectPublicKeyInfo, which can be parsed > with openssl asn1parse.) > > And they are arguing that people cannot download this file from > a well-known location without first agreeing to some conditions. > > Does everybody agree that this is bullshit and that we can distribute > this data in Debian packages as much as we like? This feels very similar to distributing HD-DVD keys [1]. The legal problem with HD-DVD keys is the US DMCA. It sounds like that would not be an issue here. ARIN might think that they can restrict the distribution of this file via copyright, but it seems like a pretty clear case of fair use. As always, ftpmaster is the one who makes the actual decision. Cheers, Walter Landry [1] https://lists.debian.org/debian-devel/2007/05/msg00043.html

