Re: [RPSEC] BGP Security Requirements v08
Russ White <riw@cisco.com> Fri, 13 July 2007 21:57 UTC
Return-path: <rpsec-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com)
by megatron.ietf.org with esmtp (Exim 4.43)
id 1I9T8j-0003AQ-UC; Fri, 13 Jul 2007 17:57:29 -0400
Received: from rpsec by megatron.ietf.org with local (Exim 4.43)
id 1I9T8j-0003AK-01
for rpsec-confirm+ok@megatron.ietf.org; Fri, 13 Jul 2007 17:57:29 -0400
Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org)
by megatron.ietf.org with esmtp (Exim 4.43) id 1I9T8i-0003AC-LM
for rpsec@ietf.org; Fri, 13 Jul 2007 17:57:28 -0400
Received: from sj-iport-6.cisco.com ([171.71.176.117])
by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I9T8i-0002Ru-B7
for rpsec@ietf.org; Fri, 13 Jul 2007 17:57:28 -0400
Received: from sj-dkim-1.cisco.com ([171.71.179.21])
by sj-iport-6.cisco.com with ESMTP; 13 Jul 2007 14:57:27 -0700
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ao8CAEaSl0arR7MV/2dsb2JhbAA
X-IronPort-AV: i="4.16,538,1175497200";
d="scan'208"; a="181850410:sNHT26287308"
Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238])
by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id l6DLvRcO027671;
Fri, 13 Jul 2007 14:57:27 -0700
Received: from [192.168.100.205] (rtp-ruwhite-vpn13.cisco.com [10.82.175.126])
by sj-core-5.cisco.com (8.12.10/8.12.6) with SMTP id l6DLvKSb009192;
Fri, 13 Jul 2007 21:57:21 GMT
Message-ID: <4697F531.3000105@cisco.com>
Date: Fri, 13 Jul 2007 17:57:05 -0400
From: Russ White <riw@cisco.com>
User-Agent: Thunderbird 2.0.0.4 (Windows/20070604)
MIME-Version: 1.0
To: Sandy Murphy <sandy@tislabs.com>
Subject: Re: [RPSEC] BGP Security Requirements v08
References: <20070713204932.3D6A63F420@pecan.tislabs.com>
In-Reply-To: <20070713204932.3D6A63F420@pecan.tislabs.com>
X-Enigmail-Version: 0.95.2
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=0.5; a=rsa-sha256; q=dns/txt; l=1617; t=1184363847;
x=1185227847; c=relaxed/simple; s=sjdkim1004;
h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version;
d=cisco.com; i=riw@cisco.com;
z=From:=20Russ=20White=20<riw@cisco.com>
|Subject:=20Re=3A=20[RPSEC]=20BGP=20Security=20Requirements=20v08
|Sender:=20; bh=0RkFUfVOYS+y+D7z0z+lom0SZW90qFIWhA7dmEgU3TU=;
b=OmQnSRmJNnkgR5xFq9beJoB70O8hwD6eEF0I1Gb0kSmugaJR18pVLi8ZkyZoo8AyjuYI+qMK
YJNBocJvE4DXxWmt2FpuZ54Nw7N4oE1Q7e0XDjsugY14b0vz0peQBaPaGtNHpnn1ccv7WznVCy
b1bJM78oWwag97w7pqIl/6WBE=;
Authentication-Results: sj-dkim-1; header.From=riw@cisco.com; dkim=pass (sig
from cisco.com/sjdkim1004 verified; );
X-Spam-Score: 0.0 (/)
X-Scan-Signature: c1c65599517f9ac32519d043c37c5336
Cc: rcallon@juniper.net, rpsec@ietf.org, dward@cisco.com, psavola@funet.fi
X-BeenThere: rpsec@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Routing Protocol Security Requirements <rpsec.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/rpsec>,
<mailto:rpsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/rpsec>
List-Post: <mailto:rpsec@ietf.org>
List-Help: <mailto:rpsec-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/rpsec>,
<mailto:rpsec-request@ietf.org?subject=subscribe>
Errors-To: rpsec-bounces@ietf.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> I think so.... I wonder how this overlaps with the p-2-p bgp draft also >> being considered? > > I don't quite know what you mean by a p-2-p bgp draft. The behringer > draft concerns the security requirements of protecting the bgp peer to > bgp peer connection (e.g., TCP MD5). Perhaps that is what you are > talking about? > > http://www.ietf.org/internet-drafts/draft-behringer-bgp-session-sec-req-01.txt > > Abstract > > The document "BGP security requirements" > (draft-ietf-rpsec-bgpsecrec-07) specifies general security > requirements for BGP. However, specific security requirements for > single BGP sessions, i.e., the connection between two BGP peers, are > only touched on briefly in the section "transport layer protection". > This document expands on this particular aspect of BGP security, > defining the security requirements between two BGP peers. Yes... We should pick this work up as a WG item, I think, because it really relates directly to the charter. But, I'll leave it to Tony to bring it up at the Chicago meeting (it overlaps with Networkers this time, and I really can't skip Networkers, *sigh*. We should try and see what folks think on list before then, if possible, though, I think (?). :-) Russ - -- riw@cisco.com CCIE <>< Grace Alone -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGl/UxER27sUhU9OQRAhb4AKDJRU5Emu0HvOTK4IZ1qxQoAk62DgCeKP1P vlNLckQ+M00dNx/MrSsDboo= =/PTq -----END PGP SIGNATURE----- _______________________________________________ RPSEC mailing list RPSEC@ietf.org https://www1.ietf.org/mailman/listinfo/rpsec
- [RPSEC] BGP Security Requirements v08 Tony Tauber
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Tony Tauber
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Joe Touch
- RE: [RPSEC] BGP Security Requirements v08 Barry Greene (bgreene)
- Re: [RPSEC] BGP Security Requirements v08 Tony Tauber
- Re: [RPSEC] BGP Security Requirements v08 Joe Touch
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Joe Touch
- RE: [RPSEC] BGP Security Requirements v08 Barry Greene (bgreene)
- Re: [RPSEC] BGP Security Requirements v08 Joe Touch
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Joe Touch
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Michael H. Behringer
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Robert Loomans
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- RE: [RPSEC] BGP Security Requirements v08 James Ko
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Tony Tauber
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Sandy Murphy
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Russ White
- Re: [RPSEC] BGP Security Requirements v08 tom.petch
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Curtis Villamizar
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent
- Re: [RPSEC] BGP Security Requirements v08 Stephen Kent