nanog mailing list archives
Re: Securing the BGP or controlling it?
From: Danny McPherson <danny () tcb net>
Date: Mon, 10 May 2010 16:36:00 -0600
On May 10, 2010, at 2:52 PM, Larry Sheldon wrote:
At the risk of seeming to be a conspiracy theorist, I am worried that with "Central Authority" we might not have "hijacking" but "rerouting for inspection and correction".
Building a database (i.e,. RPKI) aligned with the Internet number resource allocation hierarchy attesting to who's authorized to originate what route announcements and telling you how to configure your routers are two fundamentally different things. If that database doesn't exist it's tough to discriminate between legitimate and malicious or erroneous announcements - irrespective of how you discriminate. If it does exist, and you use it, anyone that can rub two packets together is surely going to employ preferences that first consider organizational and local objectives, then potentially national, and then some global inputs. This basically helps people to make more informed decisions, methinks. -danny
Current thread:
- Re: Securing the BGP or controlling it?, (continued)
- Re: Securing the BGP or controlling it? Joe Abley (May 10)
- Re: Securing the BGP or controlling it? Danny McPherson (May 10)
- Re: Securing the BGP or controlling it? Randy Bush (May 10)
- Re: Securing the BGP or controlling it? Nick Hilliard (May 11)
- Re: Securing the BGP or controlling it? Danny McPherson (May 11)
- Re: Securing the BGP or controlling it? Marshall Eubanks (May 11)
- Re: Securing the BGP or controlling it? Patrick W. Gilmore (May 11)
- Re: Securing the BGP or controlling it? Danny McPherson (May 10)
- Re: Securing the BGP or controlling it? Larry Sheldon (May 10)
- Re: Securing the BGP or controlling it? Danny McPherson (May 10)
- Re: Securing the BGP or controlling it? deleskie (May 10)
- Re: Securing the BGP or controlling it? Randy Bush (May 10)
- Re: Securing the BGP or controlling it? Larry Sheldon (May 10)
- Re: Securing the BGP or controlling it? Danny McPherson (May 10)
- Re: Securing the BGP or controlling it? Jorge Amodio (May 10)