Re: rpki vs. secure dns?

[Randy Bush <randy () psg com>]

> As Randy points out, this is not unique to SIDR-defined RPKI.  It is
> applicable to any top-down hierarchical authorization mechanism.
> Security has (non-monetary) costs.

as this derives from address space ownership's dependence on the current
hierarchic administrative allocation model, to fix it merely change the
administrative model or our trust model that depends on that hierarchy.

randy