Re: [arch-d] possible new IAB programme on Internet resilience

[Simon Leinen <[e-mail]>]

Marc Blanchet writes:
> good proto charter. I would complement that, while diversity is key,
> it is not the only facet that needs to be looked at for resilience. I
> could think of others, such as decreasing DDOS capabilities by:
> « don’t advertise/forward what’s wrong »: for example: BGP lack of
> basic filtering, BCP38, …  Maybe this is out of the scope you had in
> mind.

While it's generally a good idea to not advertise or forward what's
wrong, I think this is a general security consideration that I wouldn't
associate with resilience (maybe more with "resistance" to
attack/damage).

In fact, one could argue that in the presence of restrictive definitions
of "right", what you suggest will actually make the system less
resilient (though more secure, at least from the perspective of those
holding narrow definitions of "right").
-- 
Simon.