Re: [RPSEC] BGP Security Requirements v08

In message <20070711142015.GC27477@1-4-5.net>
Tony Tauber writes:
>  
> On Wed, Jul 11, 2007 at 06:42:11AM -0700, Joe Touch wrote:
> > 
> > 
> > > Diff from last version:
> > > 
> > > http://tools.ietf.org/wg/rpsec/draft-ietf-rpsec-bgpsecrec/draft-ietf-rpsec-bgpsecrec-08-from-07.wdiff.html
> > > 
> > 
> > I didn't see any changes related to the feedback I posted on the
> > transport protocol issues and GTSM. There are a number of current I-Ds
> > in this space that are not discussed, and any description that includes
> > the need for keying (SHOULD) might reconsider whether GTSM qualifies as
> > relevant at all in this space.
> > 
> > Joe
>  
> Hi Joe,
>  
> I appreciate your comments and attention.  I tried to work these in with
> by making a couple of modest changes in what's now section 11.  GTSM is
> (and was) only mentioned in the doc by way of saying it's inadequate as
> a "solution".  If you feel strongly that more change is needed, send
> proposed text.
>  
> Thanks,
>  
> Tony

GTSM is very effective in protecting against certain high volume
attacks that would cripple infrastructure protected by cryptographic
means alone.  From a practical standpoint GTSM used alone may be
inadequate as a solution (though some ISPs might contest even that)
but it is a required part of any solution in an ISP environment.

Curtis

_______________________________________________
RPSEC mailing list
RPSEC@ietf.org
https://www1.ietf.org/mailman/listinfo/rpsec