nanog mailing list archives

Re: BGP Security and PKI Hierarchies (was: Re: Wifi Security)


From: Kurt Erik Lindqvist <kurtis () kurtis pp se>
Date: Fri, 25 Nov 2005 16:48:49 +0100



On 25 nov 2005, at 02.07, Sean Donelan wrote:

Although techincal folks may think its just about math, unfortunately some people think certificates and signatures mean more than just mathmatical formulas. I'm a bit confused why people think network service providers will be willing to "certify" transitive trust relationships about business
relationships between third-parties.

Given that ISPs even refuse or manipulate their AS objects to hide real peering or transit details for business reasons, getting them to sign certificates for these relationships might prove even harder...

- kurtis -


Current thread: