Ok let me be a lil more clear, i wasnt referring to public access to  
the repo's i was talking about access to update the underlying  
information
is the intent to allow the public to edit the data in these  
repositories, my concern would be that if unprotected (or writable)  
the repository could
become compromised and the unsuspecting download a copy of corrupt data.

On Mar 17, 2008, at 7:55 PM, Robert Loomans wrote:

> Tony Li wrote:
>> One benefit would be a secure, automatic exchanges without cleartext
>> authentication.
>
> There is no authentication for the repositories. They are publicly,  
> anonymously available.
>
> Every party who wants to check one of your assertions (ROA, etc)  
> needs to be able to retrieve the appropriate certificates, CRLs, etc.
>
> Rob
>
> -- 
> Robert Loomans                                  Email: [EMAIL PROTECTED]
> Senior Software Engineer, APNIC                 Phone:   +61 7 3858  
> 3100
> http://www.apnic.net                              Fax:   +61 7 3858  
> 3199

_______________________________________________
Sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to