<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div>I personally think the highest priority for RIPE should be to clean up the security of the RIPE database to reduce the ability to use it for undesired purposes. Once the database is locked down to ensure that only authenticated RIPE members can register space that is registered to them, then we can look at ways to make it easier for members with space from multiple regions. Until then, as Job pointed out, there are IRR’s available to manage announcements of space consistently globally. </div><div><br>On Jun 13, 2018, at 8:03 AM, Lu Heng via db-wg <<a href="mailto:db-wg@ripe.net">db-wg@ripe.net</a>> wrote:<br><br></div><blockquote type="cite"><div><div><div><div dir="auto">The ultimate discussion should be, and will be, is it RIPE net or internet?</div></div><div dir="auto"><br></div><div dir="auto">I am saying the current situation will break network by forbidding change it, and it is network we break, really doesn’t matter where it is which registry it from.</div><div dir="auto"><br></div><div dir="auto">We are victims of massive hijacking, many of my space get registered without our knowledge as well, we spend time and money monitoring ripe dB for none authorised registration as well, I wish I don’t have to do it, I wish Afrinic IRR can function properly tomorrow, but until then, now ripe dB is our most visiable solution.</div><div dir="auto"><br></div><div dir="auto">I hope we can make effect together to get Afrinic fix their IRR, it is internet, it’s not just “Afrinic people business”, it is all of us’s business, internet is one.</div></div><div dir="auto"><br></div><div dir="auto"><div dir="auto">And until then, I think there is not enough consensus from the community to implement this change in the future. I would</div><div dir="auto">like to ask the chair, how can we ask RIPE to pause this implementation?</div></div><div><div dir="auto"><br></div><div dir="auto"><br></div><div><br><div class="gmail_quote"><div>On Wed, Jun 13, 2018 at 19:11 Job Snijders <<a href="mailto:job@instituut.net" target="_blank">job@instituut.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Wed, Jun 13, 2018 at 10:56 AM, Lu Heng <<a href="mailto:h.lu@anytimechinese.com" target="_blank">h.lu@anytimechinese.com</a>> wrote:<br>
> Internet is one, and this is a general problem of all Afrinic space, just<br>
> don’t make it personal please.<br>
<br>
I didn't intend to make anything personal, so phrased differently:<br>
What you highlight is ultimately a problem between AfriNIC members and<br>
the AfriNIC organisation.<br>
<br>
> I hope Afrinic fix it rather soon that way every thing works, until then,<br>
> prevent network change is one way of breaking it.<br>
<br>
I am sympathetic, but RIPE has no obligation to keep a glaring<br>
security hole open to accommodate another RIR's lack of expedience.<br>
<br>
As I mentioned at the microphone at the last DB-WG session, right now<br>
I can simply register ALL not-yet-registered IP space in the RIPE NCC<br>
database and in doing so lock out anyone else from making any<br>
registrations for non-RIPE-managed space. There is nothing in place to<br>
stop anyone from doing so, this would immediately fix the security<br>
problem. I hope this both illustrates the size of the security hole<br>
and the problem of any business process relying on the existence of<br>
the hole.<br>
<br>
Kind regards,<br>
<br>
Job<br>
</blockquote></div></div>
</div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>--<br>Kind regards.<br>Lu<br><br></div></div></div>
</div></blockquote></body></html>