[arin-ppml] implementing RPKI prefix validation actually increases risk

[William Herrin]

On Tue, Jun 6, 2023 at 10:38 AM Michel Py
<michel at arneill-py.sacramento.ca.us> wrote:
> the point I was trying to make was about why protocols are
> not being adopted. I have some concern that RPKI may
> eventually die from a thousand cuts; none of the issues are
> fatal, but the accumulation of them sure is annoying.

Hi Michel,

Unless ARIN did something or failed to do something which contributed
to the problem you described, it's not obvious that such information
is useful here. Can you articulate something ARIN could do which would
improve the basic fact that configuring and maintaining cryptographic
validation systems is technically challenging?

There are certainly things ARIN could do to improve RPKI uptake, but
I'm not aware of any that are responsive to the specific concern you
raised.

Regards,
Bill Herrin



-- 
William Herrin
bill at herrin.us
https://bill.herrin.us/