Re: BGP-4+

["John W. Stewart III" <[e-mail]>]

 > > 2) Security Considerations
 > > 
 > > BGP-4++ is just as secure or un-secure as BGP-4.  
 > 
 > To be more precise the two new attributes do not alter
 > BGP-4 security properties.
 > 
 > > Is it your understanding that users need this security or is
 > > TCP good enough?
 > 
 > I would like to get a feedback from the WG on this question.

at least one Popular Router Vendor has a feature for
enabling security for bgp.  my understanding (correct
me if i'm wrong) is that this is done via crypto-
checksum of the underlying tcp connection .. which has
the nice result of protecting the bgp process as well
as the underlying tcp connection from SYN and RST
attacks (bgp-only security wouldn't protect the latter)

if i were a provider, then i think this would be enough
for me right now

idrp provides for its own transport, right? does that
include anything in the way of security?  i ask to know
if any already-existing specs with alternatives exist

/jws