[rpd] Last Call - RPKI ROAs for Unallocated and Unassigned AFRINIC Address Space AFPUB-2019-GEN-006-DRAFT03.

[Anthony Ubah]

Hello Frank,


I'm sure you agree with me that the gray area exists, and also that Legal
and the Afrinic assessment committee failed to highlight this risk resource
owners are being exposed to.

There should be clear understanding of risks and implications, with a
signed mutual legal agreement between the Afrinic and the resource holders
before this policy is imposed on them(Network operators).

An additional risk to consider about inviting RIRs into routing process is
the possibility of malicious targeted "errors" which can be perpetrated by
compromised members of staff.
How can such acts be put on check, and criminalized?


Anthony



On Sun, Jun 6, 2021, 12:11 PM Frank Habicht <geier at geier.ne.tz> wrote:


> Hi,

>

> On 06/06/2021 18:46, Anthony Ubah wrote:

> ...> *Who bears the final brunt for the consequences

> > (e.g.poor QoS, fines, revenue cut, and loss of customers), Afrinic or

> > resource owner?*

> >

>

> To me it seems obvious (but maybe wrong)....

> Sure the network operators who decide to turn on validation have to

> weigh the risk of themselves doing mistakes as well as others like ROA

> publishers doing mistakes.

> And when they decide to include information from a Trust-Anchor-Locator

> operated by AfriNIC, against your good advise, hmm....

> ... they might just think that protecting themselves from IP space

> hijackers is worth the risk.

>

> I am not a lawyer.

>

> Frank

> But I'm a co-author of that policy

>

> _______________________________________________

> RPD mailing list

> RPD at afrinic.net

> https://lists.afrinic.net/mailman/listinfo/rpd

>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/rpd/attachments/20210606/aac1dc3e/attachment.html>