Re: Towards an RPKI-rich Internet (and the appropriate allocation of responsibility in the event an RIR RPKI CA outage)

[Jason Lixfeld <jason+nanog () lixfeld ca>]

> On Oct 1, 2018, at 4:36 AM, Mark Tinka <mark.tinka () seacom mu> wrote:
>
> On 1/Oct/18 10:26, John Curran wrote:
>
> > Indeed… Hence the question of liability during a RIR CA outage, should the liability for misconfigured ISPs (those 
> > handful of ISPs who do not properly fall back to using state NotFound routes) be the responsibility of each ISP, or 
> > perhaps those who announce ROAs, or should be with the RIR?
>
> Any equipment misconfigurations should be the responsibility of the operator.

^^

> Responsibility for ROA's should lie with the resource holder, in ensuring that not only is the information true, but 
> that also all announced prefixes are covered by a ROA.

^^

I need to swap out the wheels on my car.  I think I know better than to read the manual to, say, understand how much 
torque I should apply to each bolt, or what pattern I should use when tightening the bolts.  Or, I read the manual but 
decide it’s too hard to understand, and I don’t ask for help in clearing up some of the grey areas.

I change the wheels anyway.  In the end, it looks right.  They roll.  Meh.  All good.

Then the wheels fall off.

There is absolutely no one to blame for any of that but me.

In my view, I see no difference here.