nanog mailing list archives

Re: Understanding impact of RPKI and ROA on existing advertisements

From: Randy Bush <randy () psg com>
Date: Thu, 03 Nov 2022 21:56:49 -0700

for the 312th time.  origin validation was never designed to stop
attacks.  it was designed to ameliorate mistakes.

if you want to use the rpki to reduce attacks, use bgpsec.

randy

Current thread:

Re: Understanding impact of RPKI and ROA on existing advertisements, (continued)
- - - Re: Understanding impact of RPKI and ROA on existing advertisements heasley (Nov 01)
    - Re: Understanding impact of RPKI and ROA on existing advertisements Samuel Jackson (Nov 01)
    - Re: Understanding impact of RPKI and ROA on existing advertisements Randy Bush (Nov 01)
    - Re: Understanding impact of RPKI and ROA on existing advertisements Josh Luthman (Nov 02)
- Re: Understanding impact of RPKI and ROA on existing advertisements Douglas Fischer (Nov 01)
- Re: Understanding impact of RPKI and ROA on existing advertisements Owen DeLong via NANOG (Nov 01)
  - Re: Understanding impact of RPKI and ROA on existing advertisements heasley (Nov 02)
    - Re: Understanding impact of RPKI and ROA on existing advertisements Owen DeLong via NANOG (Nov 02)
    - Re: Understanding impact of RPKI and ROA on existing advertisements jim deleskie (Nov 02)
- RE: Understanding impact of RPKI and ROA on existing advertisements Jakob Heitz (jheitz) via NANOG (Nov 03)
  - Re: Understanding impact of RPKI and ROA on existing advertisements Randy Bush (Nov 03)