Subject: [saag] report from sidr

From: Sandra Murphy <[email-masked]>
Date: Thu, 13 Nov 2014 18:10:27 -0500

The SIDR wg had an interim as a tutorial for the idr folk who will be commenting on the BGPSEC protocol in a joint meeting on Friday morning.

The SIDR group met Monday morning.

The agenda was short.

A short report on the hopefully last updates to the BGPSEC protocol was first.

That was followed by a short discussion on the risks involved in removing resources from an RPKI certificate and considerations of transfer of resources between parts of the RPKI tree.  These issues are related to the reconsideration of the validation algorithm.  There was a suggestion of a need to specify the details of a transfer in the RPKI.

We had a energetic discussion of a proposed replacement for rsync as a transfer protocol for RPKI.  One advantage of the new protocol is to reduce the burden on the servers.  There were several constructive comments.  We expect to be asked to take this protocol on as a working group work item.

We had a discussion about possible misbehavior of CA, revoking someone's resources.  The proposal was to provide a new RPKI object that would ensure that the someone consented to have their resources revoked.  The discussion was energetic, and covered the authority of a resource holder to revoke a sub-allocation to a customer (or further down the allocation tree) and the balance of the rights of the resource granter and the resource recipient.

--Sandy