Re: [ncc-services-wg] [address-policy-wg] Resource Certification for non-RIPE NCC Members

* Jens Ott:

IMHO the whole system only make sense, when it is open for all resources!

Wouldn't this mean that ARIN (or LACNIC or ...) could issue resource certification for resources allocated to you by RIPE NCC? Resource certification outside the regular hierarchical model can get very messy. (That's probably the most significant advantage of DNSSEC over the out-of-tree browser PKI.)