<div dir="ltr">Hi Nishal,<div><br></div><div class="gmail_extra"><br><div class="gmail_quote">2016-06-25 3:22 GMT+01:00 Nishal Goburdhan <span dir="ltr"><<a href="mailto:nishal@controlfreak.co.za" target="_blank">nishal@controlfreak.co.za</a>></span>:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><span class="">On 24 Jun 2016, at 21:06, Honest Ornella GANKPA wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
It is quite scary actually that even the RIR is promoting such bad<br>
practices on the pretense of simplicity<br>
</blockquote>
<br></span>
i disagree.<br>
and i’m not quite sure you see the double standard here.<br>
<br>
you (meaning: a general user) are happy to use your user name and password, and give your credit card details (ie. real money) to the afrinic website, based simply on your acceptance of a perceived 3rd party valid certificate implying identification (it’s true; the payment bits at <a href="http://my.afrinic.net" rel="noreferrer" target="_blank">my.afrinic.net</a> don’t require more than a simple authenticated user login).<br>
that same set of authentication information, is needed to *manage* your resources - that critical thing that your network needs - on a daily basis.<br>
but yet, somehow you think that this same set of validation/authentication criteria isn’t good enough for specific bits of the website?<br>
i like to see evidence (proof). it could be easily argued that, since the e-voting process was Made Simpler (tm) more people used it this year; i don’t recall the actual numbers, but i’m told that there were *more* e-voters users this year, than last, eh?<br>
<br>
do i wish afrinic would improve security around my.afrinic? heck yes; i logged ticket #249014 with afrinic in october 2014 asking for 2FA, which, i’m told is slated for sometime in 2016. (my ticket is still open!) i think that 2FA would be a better security deterrent than a bpki cert. </blockquote><div><br></div><div>I'm not quite sure I get where you are disagreeing with me in your email? I believe we both agree that a more secure myAfrinic would be beneficial for all. Now wether 2 factor authentication or rpki would be better, I would need to research 2 factor authentication to have an opinion.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">my most recent cert was copied from a laptop, put onto a memory stick and handed to me - i’m sure you can spot the obvious flaws with that .. :-)<span class=""><br><br></span></blockquote><div> </div><div>:-)</div><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><span class="">
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">
And why isn't the community consulted when such decisions are taken?<br>
</blockquote>
<br></span>
there was a bylaw change that was done to allow electronic voting (being a new means of voting). that required membership (not community - mild difference!) consultation.<br>
<br>
the *mechanics* of the system, are *operational* changes. for that, we have smart people at afrinic that know how to run systems. we should let them do, what they are paid to do. do they really need to get community^Wmember consensus to let folks know that they are changing their name-server software (ie. another operational change?) :-)<span class=""><font color="#888888"><br>
<br></font></span></blockquote><div>Surely removing an authentication security is not just a mere operational change? I'm not on member list so that is why I wanted to make sure that concerned parties were informed prior that</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><span class=""><font color="#888888">
—n.</font></span><div class=""><div class="h5"><br>
<br>
_______________________________________________<br>
Community-Discuss mailing list<br>
<a href="mailto:Community-Discuss@afrinic.net" target="_blank">Community-Discuss@afrinic.net</a><br>
<a href="https://lists.afrinic.net/mailman/listinfo/community-discuss" rel="noreferrer" target="_blank">https://lists.afrinic.net/mailman/listinfo/community-discuss</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div>Honest Ornella GANKPA<br></div></div><div>Network engineer <br></div><div><br></div><div href="http://WISESTAMP_SIG_gmail_session"></div></div></div></div></div></div></div>
</div></div>