nanog mailing list archives

Re: rpki vs. secure dns?


From: Stephane Bortzmeyer <bortzmeyer () nic fr>
Date: Mon, 30 Apr 2012 15:53:46 +0200

On Mon, Apr 30, 2012 at 09:41:51AM -0400,
 Russ White <russw () riw us> wrote 
 a message of 60 lines which said:

Neither a DNS based solution nor the RPKI will resolve path attacks,

I want to be sure of the terminology: what is deployed presently is
the bundle RPKI+ROA. As their name say, ROA can only be used against
origin attacks. But RPKI can be used for other things than RPKI+ROA,
including BGP-sec (against path-based attacks), no?



Current thread: