Re: [RPSEC] [secdir] [OSPF] [sidr] Authentication for OSPFv3

[Sam Hartman <hartmans-ietf at mit.edu>]

>>>>> "Acee" == Acee Lindem <acee at redback.com> writes:

    Acee> One thing to take into consideration is that the outcome of
    Acee> our KMART BOF was that nobody deploying networks wanted
    Acee> routing infra-structure based on a third-part verified
    Acee> certificates.  Thanks, Acee
    Acee> On Sep 30, 2008, at 10:57 AM, David Ward wrote:

Hmm.  I actually did not get a strong sense of any particular
conclusions from that BOF.  People made it clear  that having the routing infrastructure fail because some security-related third party was unavailable was an operational non-starter.


It's certainly true that some people in the room spoke out against
certificates.  At least some of the reasons given did not actually
inherently apply to certificates as a whole although they did create
some significant constraints for what would not create operational
problems.

_______________________________________________
RPSEC mailing list
RPSEC at ietf.org
https://www.ietf.org/mailman/listinfo/rpsec