Re: rpki-client: make maximum number of publication points to sync operator configurable

2021-11-26 Thread Theo de Raadt
I don't agree with any of these reasons. These limits have been considered carefully. At this time, there is no known justification for someone in the 'network admin' role to change any of them. We do not know what a future 'emergency' would look like, but I doubt it would look like "oh I know,

Re: rpki-client: make maximum number of publication points to sync operator configurable

2021-11-25 Thread Theo de Raadt
Claudio Jeker wrote: > On Thu, Nov 25, 2021 at 08:18:10PM +0100, Sebastian Benoit wrote: > > Job Snijders(j...@openbsd.org) on 2021.11.25 16:13:51 +: > > > It might be advantageous to permit operators to optionally specify the > > > maximum number of publication points with which rpki-client

Re: rpki-client: make maximum number of publication points to sync operator configurable

2021-11-25 Thread Claudio Jeker
On Thu, Nov 25, 2021 at 08:18:10PM +0100, Sebastian Benoit wrote: > Job Snijders(j...@openbsd.org) on 2021.11.25 16:13:51 +: > > It might be advantageous to permit operators to optionally specify the > > maximum number of publication points with which rpki-client will > > synchronize. > > > >

Re: rpki-client: make maximum number of publication points to sync operator configurable

2021-11-25 Thread Sebastian Benoit
Job Snijders(j...@openbsd.org) on 2021.11.25 16:13:51 +: > It might be advantageous to permit operators to optionally specify the > maximum number of publication points with which rpki-client will > synchronize. > > For example: "doas rpki-client -m 1 -t /etc/rpki/ripe.tal" has as effect > tha

rpki-client: make maximum number of publication points to sync operator configurable

2021-11-25 Thread Job Snijders
It might be advantageous to permit operators to optionally specify the maximum number of publication points with which rpki-client will synchronize. For example: "doas rpki-client -m 1 -t /etc/rpki/ripe.tal" has as effect that only RIPE NCC's repository is contacted, but none of the delegated repo