<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Hi Anthony,</div>
<div class=""><br class="">
</div>
<div class="">The email address associated with an API Key was created for older template systems that could not accommodate the API Key in the email template. Currently, the system allows either a match from the email address or the presence of the API Key
but does not force the email templates to contain an API Key if it is from the associated email address.</div>
<div class=""><br class="">
</div>
<div class="">If you would like us to add a new feature for requiring both the API Key and a matched sending email address, we can contact you to have this formally submitted through the ARIN Consultation and Suggestion Process (ACSP). (<a href="https://www.arin.net/participate/acsp/index.html" class="">https://www.arin.net/participate/acsp/index.html</a>).</div>
<div class=""><br class="">
</div>
<div class="">You may also be interested in a previously submitted request, ACSP 2011.17 (<a href="https://www.arin.net/participate/acsp/suggestions/2011-17.html" class="">https://www.arin.net/participate/acsp/suggestions/2011-17.html</a>), which requests the
ability to assign more granular access permissions for API Keys.</div>
<div class=""><br class="">
</div>
<div class="">Thanks for your time.</div>
<div class="">Andy Newton,</div>
<div class="">Chief Engineer</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Jan 27, 2017, at 11:37 AM, Delacruz, Anthony B <<a href="mailto:Anthony.DeLaCruz@centurylink.com" class="">Anthony.DeLaCruz@CenturyLink.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
I use old school emails and API key on some of my submissions as not all of our ranges are covered by the restful tool we have, internal politics, databases and the such. I have other teams that need to do some updates and considering let them email as well
to distribute more work. I don’t want to just give them an api key that seems like once you have the api key then anything is up for grabs and it could be easily shared. I don’t want to make these lower level staff related POC that has caused too much trouble
in the past by their lack of understanding to even allow them an arin online account. The option to associate it comes with all these warnings of doom and gloom inside the arin online, though that seems like it adds a measure of security? Now at least only
that email can send in request where if anyone has an api key it doesn’t matter what email it comes from they can make changes. Could/should there be an option where both the API key and email must match and both be submitted for the request to be processed?
Would that tighten up security? Are there other suggestions as to how to distribute some change ability buy still have measured control? I’ve spent months cleaning up bad records where former staff did completely bad and wrong entries and don’t want to again.<span class="Apple-converted-space"> </span><o:p class=""></o:p></div>
</div>
<center style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately
notify the sender by reply e-mail and destroy all copies of the communication and any attachments.</center>
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">arin-tech-discuss
mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<a href="mailto:arin-tech-discuss@arin.net" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">arin-tech-discuss@arin.net</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<a href="http://lists.arin.net/mailman/listinfo/arin-tech-discuss" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">http://lists.arin.net/mailman/listinfo/arin-tech-discuss</a></div>
</blockquote>
</div>
<br class="">
</body>
</html>