On Apr 1, 2013, at 2:03 PM, Danny McPherson <[email protected]> wrote: > On 2013-04-01 10:17, Sharon Goldberg wrote: > >> So, if we suppose that prefixes directly allocated by the RIRs are >> given their own resource certs, we see that these resource certs can >> whack ROAs for ASes in multiple countries. (Look at 8/8 or 12/8, for >> example.) How would takedowns play out if they cross national >> borders? > > Various flavors of this "whacking" happens a *great deal* today in the DNS > operations space, where LEOs engage with registries or registrars because > they have operations within direct or MLAT reach, as opposed engaging > directly with a registrar, registrant, or the transacting systems / operators > themselves. Certainly, RPKI will help some with the latter of these (i.e., > whack transacting systems rather than enablers).
The present equivalent for the RIRs would be LEO's engaging in orders to change the address holder associated with an IP block, and I am happy to say that (at least in ARIN's case) that we have not seen any such requests to date. We do work extremely well with law enforcement, but relations are predominantly focused on obtaining information for various investigations. ARIN serves more than 25 different countries, and as much as possible expects to see LEO requests to involve LEA in the country of the resource holder except in extremis cases. An actual uncoordinated LEO order to change a registrant on an IP block could be rather problematic; there is some chance that I would end up needing a toothbrush and good reading material depending on the country of the registrant & nature of the circumstances. FYI, /John John Curran President and CEO ARIN _______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
