This looks special? https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-...
what is raking? On Thu, Jun 3, 2021 at 3:29 PM John Alcock <john@alcock.org> wrote:
This looks special?
https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-...
raking=rpki+spell check On Thu, Jun 3, 2021, 1:32 PM Christopher Morrow <morrowc.lists@gmail.com> wrote:
what is raking?
On Thu, Jun 3, 2021 at 3:29 PM John Alcock <john@alcock.org> wrote:
This looks special?
https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-...
On Thu, Jun 3, 2021 at 4:53 PM TJ Trout <tj@pcguys.us> wrote:
raking=rpki+spell check
:) I think, since we don't realy know what arin's doing ... we could speculate :) but: 1) unreachable publication point / CA == 'ok, see you in 30 mins on my next cycle through the world' (no real changes) b) revoking some portion of their claimed resources in various forms of CA == 'ideally a bunch of routes suddenly go unknown' == 'ok' iii) making a bunch of validatable changes to ROA/certs/content == 'worse possible outcome, likely to make a bunch of routes invalid' In case of b or iii I'd expect we'll see some fun times in BGP, either 'a bunch of re-announcement' or 'a bunch of withdrawals and disasters' :) I'm sure we'll learn something though?
On Thu, Jun 3, 2021, 1:32 PM Christopher Morrow <morrowc.lists@gmail.com> wrote:
what is raking?
On Thu, Jun 3, 2021 at 3:29 PM John Alcock <john@alcock.org> wrote:
This looks special?
https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-...
1) unreachable publication point / CA == 'ok, see you in 30 mins on my next cycle through the world' (no real changes)
yup. much ado about nothing
b) revoking some portion of their claimed resources in various forms of CA == 'ideally a bunch of routes suddenly go unknown' == 'ok' iii) making a bunch of validatable changes to ROA/certs/content == 'worse possible outcome, likely to make a bunch of routes invalid'
if the CA's pub point is available and the data have been modified, which includes removal, then all sorts of wild things can happen. but there is no need for arin to formally test that last as each of the RIRs has untentionally done so at least once; sometimes for over a day. randy
Damn autocorrect. Rpki not raking. On Thu, Jun 3, 2021 at 3:29 PM John Alcock <john@alcock.org> wrote:
This looks special?
https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-...
participants (4)
-
Christopher Morrow
-
John Alcock
-
Randy Bush
-
TJ Trout