Re: BGP-4+

[Geert Jan de Groot <[e-mail]>]

On Wed, 18 Dec 96 14:59:12 PST  Yakov Rekhter wrote:
> > 2) Security Considerations
> > BGP-4++ is just as secure or un-secure as BGP-4.  
> To be more precise the two new attributes do not alter
> BGP-4 security properties.
> > Is it your understanding that users need this security or is
> > TCP good enough?
> I would like to get a feedback from the WG on this question.

I think you need to re-focus your question. What are you trying to protect?
a. RST-attachs to BGP sessions and such, including spoofing of BGP data?
   IPSEC-AH will fix that in an exportable manner..
b. People knowingly and willingly injecting false routes (such as host route)
   to play games with traffic?
   That's a much harder problem and IMHO that would be out of scope for BGP4++

I think you'll get more useful answers if you post your questions that way.
What do others think?

Geert Jan