The first generation of security allowed network operators to specify a MAIL-FROM attribute, requiring that updates be sent from a specific email address. Next, (B)CRYPT-PW / MD5-PW password hash authentication was added, and finally a PGP-KEY attribute was added, allowing users to cryptographically sign submitted edits. Subsequent work by the  Regional Internet Registries created additional IRRs which strictly tied permission to advertise IP blocks to RIR allocation data.
The first security protocol allowed network administrators to specify a MAIL-FROM attribute, requiring updates to originate from a particular email address. This was followed by the addition of (B)CRYPT-PW / MD5-PW password hash authentication and then a PGP-KEY attribute, which enabled users to securely sign submitted edits. Additionally, subsequent work by Regional Internet Registries led to the creation of additional IRRs that tied permission to advertise IP blocks to RIR allocation data.