The question of automating address assignment has been looked into; about the only way it could be done would be if we had a secure method of making sure that the applicant is a bona fide ham radio operator. At the moment, the only known automated way of doing this is to use Logbook of the World certificates, which greatly restricts the number of people who could prove their eligibility and has its own set of problems.
Brian,
The problem of knowing who we're corresponding with is as old as the written word. I feel that PKI provides the best solution available.
I'm not familiar with LOTW, but I know the PKI process well, and I'm confident that it provides a simpler and more robust solution.
There are, of course, many different ways to implement a secure process: for the moment, I'll ask that we leave aside the implementation details and talk about the idea. We could use a secure web site to give access to coordinators, or restrict ssh access to key holders, or accept only signed emails: the process is essentially the same for all.
It boils down to authentication: we can issue private keys to every coordinator who seeks to use an automated process to issue IP addresses.
* PGP/GPG users have access to "Keysigning parties" where other keyholders will verify their meatspace identities by inspecting their drivers license, passport, etc.
* SSH and SSL users could, in theory, employ the keysigning process to verify their identity, even though it's not customary. They could also provide letters from attorneys or ministers or other public figures, attesting to their identities, in the same manner that Thawte used to verify X.509 certificates.
Long story short, LOTW isn't the only way to verify an identity. There are other methods, already implemented and available, which can be used instead.
Bill, KW4OC
On Sat, Jan 9, 2016 at 4:39 PM, Bill Horne bill@horne.net wrote:
I'm not familiar with LOTW, but I know the PKI process well, and I'm confident that it provides a simpler and more robust solution.
LOTW uses x.509 certificates, so it fits within the realm of PKI. The benefit to LOTW is that: 1. ARRL will verify the identity of any ham for free and sign a certificate. This removes the burden of verifying identities from AMPR or any other group that uses them. 2. Being x.509 certificates, they work with all the standard infrastructure such as TLS websites.
Tom KD7LXL