nanog mailing list archives

Re: Web expert on his 'catastrophe' key for the internet


From: Doug Barton <dougb () dougbarton us>
Date: Thu, 29 Jul 2010 20:58:52 -0700

On 07/29/10 20:09, Valdis.Kletnieks () vt edu wrote:
On Thu, 29 Jul 2010 20:19:45 CDT, Jorge Amodio said:

I suggest that it should be seriously considered to revoke the role of
RKSH from the person that used that role to obtain publicity and self
promotion, and request the immediate return of all cryptographic
material. This is not something to get the guy on a limo an parade him
on the streets of his local town or have now every one included on the
public list interviewed by news outfits.

Well, there's a bit of a problem - you have to make the list of key holders
known, so that all and sundry can verify for themselves that ICANN (or any
other single organization, for that matter) doesn't have all the marbles.

A second point is that if you have 7 keyholders who are not well known, they're
actually *easier* targets than if they're well known public figures.  Think
about that for a bit - who's easier to coerce without being detected, the guy
who lives in the apartment downstairs from me, or somebody who's out in the
open and identified as important?

A pretty good article that puts a lot of the rest of it back into perspective:

http://www.digitalsociety.org/2010/07/fantasy-role-playing-has-no-place-in-dnssec

That article has numerous errors in it as well, and in some ways is even
worse because the guy is claiming to be a security expert who actually
understands how it all works.


Doug

-- 

        Improve the effectiveness of your Internet presence with
        a domain name makeover!    http://SupersetSolutions.com/

        Computers are useless. They can only give you answers.
                        -- Pablo Picasso



Current thread: