Cryptographic Authentication

[Member Services]

On 14 June 2007 the ARIN Board of Trustees rejected the three proposals 
listed below.

*2007-1: Reinstatement of PGP Authentication Method
*2007-2: Documentation of the Mail-From Authentication Method
*2007-3: Documentation of the X.509 Authentication Method

With regard to these proposals, the ARIN Board of Trustees makes the 
following statement.

**************************************
"On 17 May 2007 the ARIN Advisory Council advanced policy proposals 
2007-1, 2007-2, and 2007-3 to the Board of Trustees, recommending 
adoption. The Board found strong community support for ARIN to use 
crypto authentication mechanisms whenever possible and to implement PGP 
as soon as possible.

However, the Board believes that the use of crypto authentication 
mechanisms is an operational matter and not an Internet number resource 
policy matter, and thus did not adopt these as policy
proposals. Instead, the Board has directed staff to implement crypto 
authentication mechanisms (specifically including PGP) on all 
communications concerning the management of Internet number resources 
whenever feasible. It further directed the staff to implement the use of 
PGP as soon as possible.

The Board recommended that ARIN staff develop training materials to 
assist those communicating with ARIN about the management of Internet 
number resources in making use of crypto authentication mechanisms in 
their communication with ARIN.

The Board of Trustees would like to thank the Advisory Council and the 
authors for their work in advancing these functional proposals."
***********************************************

The PGP crypto authentication method will be implemented not later
than 15 September 2007.

Policy proposal texts are available at the Policy Proposal Archive which 
can be found at:
http://www.arin.net/policy/proposal_archive.html


Regards,

Member Services Department
American Registry for Internet Numbers