Remove -verify option - Githubissues

bgp / stayrtr

RPKI-To-Router server implementation in Go

BSD 3-Clause "New" or "Revised" License

91 stars 13 forks source link

Remove -verify option #2

Closed job closed 3 years ago

job commented 3 years ago

Simplify the code by shifting responsibility of VRP transport to elsewhere

randomthingsandstuff commented 3 years ago

So, if I understand this right, -verify simply checks a signature in the JSON stuff?

job commented 3 years ago

Yes. The JSON data is canonicalized in a specific way and then signed, but I think it should be left as a decision for the operator where to pull the VRP set from and how to safely transport it.

randomthingsandstuff commented 3 years ago

ok so more like only octorpki signs and we don't care. this is low priority till its time to refactor things.