[ppml] Policy Proposal 2007-3 - Last Call

Policy Proposal 2007-3
Documentation of the X.509 Authentication Method

The ARIN Advisory Council (AC), acting under the provisions of the ARIN
Internet Resource Policy Evaluation Process (IRPEP), determined that
there is community consensus in favor of the proposal and moved it to
last call. The AC made this determination at their meeting at the
conclusion of the ARIN Public Policy meeting on 24 April 2007. The Chair
of the AC reported the results of the AC meeting during the Members
Meeting. The AC Chair's report can be found at:
http://www.arin.net/meetings/minutes/ARIN_XIX/mem.html

The policy proposal text is provided below and is also available at:
http://www.arin.net/policy/proposals/2007_3.html

Comments are encouraged. All comments should be provided to
ppml at arin.net. This last call will expire at 23:59, Eastern Time, 9 May
2007.

The ARIN Internet Resource Policy Evaluation Process can be found at:
http://www.arin.net/policy/irpep.html

Regards,

Member Services
American Registry for Internet Numbers (ARIN)


##*##


Policy Proposal 2007-3
Documentation of the X.509 Authentication Method

Policy statement

Proposal type: New

Policy term: Permanent

Policy statement:

DELETION FROM THE NRPM

12.3 X.509

This section intentionally left blank.

ADDITION TO THE NRPM

12.3 X.509

ARIN accepts X.509-signed transactions as authentic communication from
authorized Points of Contact. POCs may denote their records
"crypt-auth," subsequent to which unsigned communications shall not be
deemed authentic with regard to those records.

Rationale:

This policy complements the previously-proposed "Reinstatement of PGP
Authentication Method" which introduces section 12 to the NRPM. Section
12 relates the existence of three authentication methods. Two of those,
mail-from and X.509, were preexisting but not documented within the NRPM.

This policy proposal simply seeks to provide brief documentation of the
existence of the X.509 authentication method. Because the specific
wording of the documentation may be subject to debate, and is in no way
interdependent upon the documentation of the other two methods, it is
being proposed in a separate policy, so that consensus may be more
easily reached.

Timetable for implementation: Immediate