Re: BGP Security and PKI Hierarchies (was: Re: Wifi Security)

[william(at)elan.net]

On Mon, 28 Nov 2005, Randy Bush wrote:

> > proof of identity
> > S(withRIRkey, AS_A_key, AS_A)
> > or
> > S(withwebofttrustkeys, AS_A_key, AS_A)
> >              maybe Randy is saying this is two steps, not an "OR"
> S(withRIRkey, someNonRIRidentity, asA)
Good idea. And this "someNonRIRidentity" may actually be another region RIR!
(which solves problem for those involved with multiple RIRs but who prefer 
to maintain one primary identity for all regions).

--
William Leibzon
Elan Networks
william@elan.net