15 Aug
2008
15 Aug
'08
9:27 a.m.
On Thu, 14 Aug 2008 23:44:50 -0600, Danny McPherson wrote:
Okay, I admit I haven't paid the closest attention to RPKI, but I have to ask: Is this a two-way shared-key issue, or (worse) a case where we need to rely on a central entity to be a key clearinghouse?
<snip>
In short, the latter, which is precisely DRC's point.
Presuming that you meant to say that the RPKI is a centralized system, I'd quibble that it is certainly a rooted system, but not centralized. Like: DNS is rooted, but I'd not call it centralized. The RPKI is hierarchical and distributed all over everywhere. --Sandy