nanog mailing list archives

Re: MD5?


From: Jon Lewis <jlewis () lewis org>
Date: Fri, 27 Jan 2012 15:32:42 -0500 (EST)

On Fri, 27 Jan 2012, Christopher Morrow wrote:

lots of folks still use it yes. is it helpful? maybe? maybe not? is
this peering over a shared media (like a 10base-T hub).

You might point out that you'll be enabling this, then promptly
writing the 'secret' on a large whiteboard in your noc... because
chances are the config won't include it in rancid and ... you don't
have a place to store these securely that's not prone also to outages
:(

also, customers wander through your NOC, so...

All that may be true, but still, the random hacker in Romania who wants in on their BGP session won't know the secret...probably.

----------------------------------------------------------------------
 Jon Lewis, MCP :)           |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


Current thread: