Re: [RPSEC] BGP Security Requirements v08

In message <F1A1D21DA394814E824AC89F5A005BA312CCE59D@zcarhxm0.corp.nortel.com>
"James Ko" writes:
>  
>  
> Indeed, ideally incoming data should be "authentic" and "verifiable",
> otherwise we are back to square one and this work is no different but to
> give bad guys a window of opportunity to run man-in-the-middle attacks,
> or inject bogus routes.

So why does Internet routing work at all today?  Rhetorical question.

It does work by the way.  Not always perfectly.

Curtis

ps - The answer is because the DOS would be short lived and very
traceable (ie: not much damage and they'd get caught).  The reason for
this is the bogus information would have to be injected from within an
ISP and ISP security of their own infrastructure is reasonably good.

_______________________________________________
RPSEC mailing list
RPSEC@ietf.org
https://www1.ietf.org/mailman/listinfo/rpsec