Re: [RPSEC] BGP Security Requirements v08

In message <XFE-AMS-332SA1XvpFV00000073@xfe-ams-332.cisco.com>
"Michael H. Behringer" writes:
>  
> [Just back from vacation today, so I missed the earlier discussion.]
>  
> Just as a reminder where I was coming from with my draft
> http://www.ietf.org/internet-drafts/draft-behringer-bgp-session-sec-req-01.txt:
> This was directly taken from a to-do-list from Russ, specifying that
> the WG needs to work on the point-to-point security requirements of
> BGP speakers:
>  
> At 15:37 06/01/2007, Russ White wrote:
> [...]
> >o P-2-P security requirements for BGP: This was to provide some cover
> >and thinking on the various TCP auth mechanisms to replace MD5 that are
> >currently being considered. We need, I believe, a volunteer to
> >author/edit this, and get it moving.
> [...]
>  
> I request (again) that my draft be accepted as a WG item, after all
> it's taken from the WG's to-do list ;-)

IMO this should be a WG item.

> The problem space of draft-behringer-bgp-session-sec-req-01 is
> significantly smaller than that of draft-ietf-rpsec-bgpsecrec-08; I
> can see this work remaining independent, but I can also see it merged
> with draft-ietf-rpsec-bgpsecrec-08. My current preference is to keep
> it standalone, since it's problem space is nicely small and
> well-defined. But I have no strong views either way. I guess we should
> discuss this in Chicago.

Since the requirements are those that the ISPs have been working from
for over a decade, it is likely that we will arrive at agreement on what
those requirements are within a reasonable amount of time.  Then
draft-ietf-rpsec-bgpsecrec can reference bgp-session-sec-req and we
can put to end any discussion on rpsec-bgpsecrec being incomplete due
to failure to acknowledge these requirements.

> BTW, I have received a number of emails with feedback which I have not
> yet incorporated into the draft, due to time constraints. Apologies
> for that. Will happen after the IETF.
>  
> See you all next week, 
> Michael

Curtis

_______________________________________________
RPSEC mailing list
RPSEC@ietf.org
https://www1.ietf.org/mailman/listinfo/rpsec