A New Internet-Draft is available from the on-line Internet-Drafts directories.
Title : Suspenders: A Fail-safe Mechanism for the RPKI
Author(s) : Stephen Kent
David Mandelberg
Filename : draft-kent-sidr-suspenders-00.txt
Pages : 17
Date : 2013-09-09
Abstract:
The Resource Public Key Infrastructure (RPKI) is an authorization
infrastructure that allows the holder of Internet Number Resources
(INRs) to make verifiable statements about those resources. The
certification authorities (CAs) in the RPKI issue certificates to
match their allocation of INRs. These entities are trusted to issue
certificates that accurately reflect the allocation state of
resources as per their databases. However, there is some risk that a
CA will make inappropriate changes to the RPKI, either accidentally
or deliberately (e.g., as a result of some form of "government
mandate"). The mechanisms described below, and referred to as
"Suspenders" are intended to address this risk.
Suspenders enables an INR holder to publish information about changes
to objects it signs and publishes in the RPKI repository system.
This information is made available via a file that is external to the
RPKI repository, so that Relying Parties (RPs) can detect erroneous
or malicious changes related to these objects. RPs can then decide,
individually, whether to accept changes that are not corroborated by
independent assertions by INR holders, or to revert to previously
verified RPKI data.
The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-kent-sidr-suspenders
There's also a htmlized version available at:
http://tools.ietf.org/html/draft-kent-sidr-suspenders-00
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/
_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
