[rpd] Last Call - RPKI ROAs for Unallocated and Unassigned AFRINIC Address Space AFPUB-2019-GEN-006-DRAFT03.

[Frank Habicht]

Hi,

I have 2 recommendations for you.

On 06/06/2021 20:38, Anthony Ubah wrote:

> Hello Frank,

> 

> 

> I'm sure you agree with me that the gray area exists, and also that

> Legal and the Afrinic assessment committee failed to highlight this risk

> resource owners are being exposed to.

> 

> There should be clear understanding of risks and implications, with a

> signed mutual legal agreement between the Afrinic and the resource

> holders before this policy is imposed on them(Network operators).


1. please do not turn on validation in your routers!
2. please don't even try to operate routers yourself.
Bonus: consider a carrier in the legal profession.

For *us*(network operators) it is very telling that you used these words:
"them(Network operators)"
no. I'm actually not interested in your "explanation", don't bother.


> An additional risk to consider about inviting RIRs into routing process


Chairs: I really don't have any patience any more for this phrase.
I don't know how often we have to hear/read the same.


> is the possibility of malicious targeted "errors" which can be

> perpetrated by compromised members of staff.

> How can such acts be put on check, and criminalized?


Easy: The parliament of Mauritius.

But I believe that it is outside the scope of the PDP.

Frank


> 

> 

> Anthony

> 

> 

> 

> On Sun, Jun 6, 2021, 12:11 PM Frank Habicht <geier at geier.ne.tz

> <mailto:geier at geier.ne.tz>> wrote:

> 

>     Hi,

> 

>     On 06/06/2021 18:46, Anthony Ubah wrote:

>     ...> *Who bears the final brunt for the consequences

>     > (e.g.poor QoS, fines, revenue cut, and loss of customers), Afrinic or

>     > resource owner?*

>     >

> 

>     To me it seems obvious (but maybe wrong)....

>     Sure the network operators who decide to turn on validation have to

>     weigh the risk of themselves doing mistakes as well as others like ROA

>     publishers doing mistakes.

>     And when they decide to include information from a Trust-Anchor-Locator

>     operated by AfriNIC, against your good advise, hmm....

>     ... they might just think that protecting themselves from IP space

>     hijackers is worth the risk.

> 

>     I am not a lawyer.

> 

>     Frank

>     But I'm a co-author of that policy

> 

>     _______________________________________________

>     RPD mailing list

>     RPD at afrinic.net <mailto:RPD at afrinic.net>

>     https://lists.afrinic.net/mailman/listinfo/rpd

>     <https://lists.afrinic.net/mailman/listinfo/rpd>

>