>> cool hack 14.3: the router itself can gen the public/private key pair >> a la ssh, the person configuring can extract the public key and send >> it to the rpki goddesses to be signed by the appropriate cert and put >> in the rpki. the private key never leaves the router! > I believe that Steve Kent says that usually a certificate request is > required to present Proof Of Possession (of the private key). So just > discovering the public key somehow would not be sufficient to be able > to request a cert with that public key.
dear dr nit pick, when dealing with goddesses, one always frames things as a request randy _______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
