Re: [Idr] draft-ymbk-l3vpn-origination-00.txt

[Randy Bush <[e-mail]>]

thanks for review!

>    This document describes how the originating PE, West, may sign the
>    announcement so that the destination PE, East, may authenticate the
>    NLRI and the Route Distinguisher (RD), , see RFC 4364 [RFC4364]
> 
> Let me point out that West PE is not the originator of the route
> advertisement .. neither East PE is the destination. Originator and
> destination are corresponding CEs on both sides.

good catch!

> With this in mind let me also point out that RFC4364 VPN sites very
> often use private addresses which are never part of any public RPKI
> for one simple reason that public RPKI has no notion of RDs to make
> such prefixes unique.

if they want to use the rpki, then, just as other rpki publishers using
1918 space, they would have local trust anchors and certify the private
space.  see draft-ietf-sidr-ltamgmt.

> Last let me point out also that RFC4364 defines CSC interconnect model
> which this draft also does not comment on.

more specific cite, please?  thanks.

randy