[Idr] Re: [Sidrops] Re: BGP over TLS/TCP - draft-wirtgen-bgp-tls-05 - draft update

[Thomas Wirtgen <[e-mail]>]

Hi Nick,

Regarding the status change, this was not unintentional error. The draft 
began as "Experimental" because we had not finalized the design in the 
first revisions (e.g., implicit vs. explicit TLS, reuse of port 179, 
interaction with TCP-AO).

The experimental track allowed us to iterate, especially since the draft 
originated from academic research rather than a working group effort 
from the beginning. Now that the mechanism has stabilized over several 
iterations, moving to the Standards Track shows that it is intended for 
real operational deployment rather than experimentation.

It was a deliberate choice, partly to determine if there was community 
interest continuing this draft further before committing to the 
Standards Track.

We agree that the sentence regarding TCP-AO should come back. It is 
important to write explicitly that managing TCP-AO keys is operationally 
difficult. However, securing long-lived BGP sessions remains important, 
especially in multihop scenarios where the risk of injection/spoofing is 
higher. In the next revision, we will restore that sentence (or 
something similar) to make this trade-off explicit rather than leaving 
it implicit.

Thanks for the feedback.

Thomas (speaking for the co-authors)