On Tue, Sep 22, 2009 at 11:27 AM, Smith, Donald <[email protected]> wrote:

> Difficult to sell is putting it mildly.
> Most ISPs don't run CAs today nor do they have the infrastructure to do so.
> Neither will they want to turn over any aspect of routing control to a 3rd 
> party.

As a small correction.. VerizonBusiness does run a CA
(betrusted/baltimore-security/cybertrust)... of course, you may not
want the people who cant' get your phone bill right to control your
routing either :)

So, back on topic, if a party NOT the RIR-set runs the CAs (or many
parties not the RIRs run the CAs),  let's assume that uniqueness is
maintained in address information (singular copies of
netblock/allocation data). Some pointers/links back to the RIR
databases would have to be maintained

For grins, what about RADb running this service? (or the existing set
of IRR's) What sort of implications does this have for stability and
cleanliness of the data? Can we be anymore assured of having
up-to-date data in the CA heirarchy than we can in the current IRR
databases? If we can't be assured of that, how valuable is this new
regime?

-chris
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to