Re: [MBONED] [Msr6] MSR6 BOF 3rd Issue Category: More details are requested about the large scale use cases, including issue 8-11

[Dino Farinacci <[e-mail]>]

I'm not going to argue what has succeeded in the past or what has failed. They are subjective comments and are not productive for moving forward.

Removed text I'm not going to respond to.

My point was that its "easier to DoS attack a data-plane then a control-plane". I didn't make any other assertions about control-plane security.

> MSDP was then (predictably ?) the first protocol that brought down
> a good part of the Internet control plane when it was attacked UNINTENTIONAL:

This is simply not true. I was debugging such events at the time and the Internet was working or I wouldn't be able to debug it. ;-)

>> If not controlled, unlike SR, a general source-routing approach is loaded with security issues.
> 
> High level, you are arguing that control plane state is more trustworthy or
> better controlled than packet header state, but IP multicast control plane state

No I am not. Its easier to get access to the data-plane by an ordinary user. So anyone can really attack the data-plane, and they might not even know it. I did not mention trust at all.

Dino