[Community-Discuss] post ipv4 depletion frauds, brokers activities

[Andrew Alston]

Noah is it best practice? Under who's definition? Best practice to centralize something that has grown organically and found its very success in its decentralized anarchical structures? I don't think so.

I have fundamental problems with the centralization involved in RPKI, which creates unique security problems in and of itself in my view.

And I also point out that security is NOT always best practice, because security is very often a trade off. For example, is it best practice for a company to invest in security infrastructure it cannot afford and thereby risk bankcrucpy? Of course it isn't.  Best practice is not a globally holistic thing, what is best for one region may not be best for another.

There is a saying, one mans food is another mans poison. This can be applied to rpki as well imho.

You might wanna ask why there was never consensus in the RIPE region about rpki and the policy working groups could never get it passed, so ripe to push RPKI put it through a non standard membership vote which passed by a very small majority with a large number of abstentions.

There was never consensus

Andrew

Get Outlook for iOS<https://aka.ms/o0ukef>




On Sun, Jun 26, 2016 at 5:15 PM +0300, "Noah" <noah at neo.co.tz<mailto:noah at neo.co.tz>> wrote:


On 25 Jun 2016 16:51, "Andrew Alston" <Andrew.Alston at liquidtelecom.com<mailto:Andrew.Alston at liquidtelecom.com>> wrote:
>
> Just need to point out, RPKI is a *choice*, and there could be many reasons for people NOT running RPKI, that go beyond just AfriNIC promoting it or not.
>

No one disagreed and yes its your choice.

The point being put forward is "Its a best practise to do it" because its important to support any initiative that tries to promote improved security of Internet routing.

There were valid reasons that compeled the community that was involved in the RPKI proposition and drafts until some folks startes implementing.

https://tools.ietf.org/html/rfc6480

>
>
> I for one am not on that list of ASN's, and I have zero plans to be on that list of ASN's.  Not because I don't know how to implement it, not because I can't go and get it, but because I am fundamentally opposed to RPKI for various reasons.
>

And what are those fundamental reason if you may?

>
> Andrew
>

Noah
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/community-discuss/attachments/20160626/b03be428/attachment.html>