Re: [sidr] BGPSEC Threat Model ID

Christopher Morrow <morrowc.lists@gmail.com> Sat, 05 November 2011 01:52 UTC

MIME-Version: 1.0
Sender: christopher.morrow@gmail.com
In-Reply-To: <m262iz2xl8.wl%randy@psg.com>
References: <E96517DD-BAC7-4DD8-B345-562F71788C6A@tcb.net> <p06240807cad42f85eb7d@193.0.26.186> <32744.216.168.239.87.1320175657.squirrel@webmail.tcb.net> <p06240801cad6ab773279@193.0.26.186> <D9A38669-883D-4090-9F95-BC5C63220950@tcb.net> <p06240801cad800485596@193.0.26.186> <EEBF68E0-FAD9-4AF3-B81B-78760D200D9B@tcb.net> <p06240808cad85ff73d61@193.0.26.186> <080F8FFF-D2C7-4414-B53A-233F88D2009F@vpnc.org> <CAFU7BATC-6DUDNuadakwSa5wj0ryy0=49=XveBXD5Wv=5JL-ag@mail.gmail.com> <m2aa8c489s.wl%randy@psg.com> <53FA9B4A-552C-4998-8F69-592A0F5AA13B@verisign.com> <CAL9jLaZj1wcmDnbm1f9=csUv2Uuq_w3rS6UEYmUHAQDPWT9zFg@mail.gmail.com> <m262iz2xl8.wl%randy@psg.com>
Date: Fri, 04 Nov 2011 21:52:45 -0400
Message-ID: <CAL9jLaYiEWF2SvhD49pkyGHPMxHcg1+2ULQbX648rtQkMEVnNA@mail.gmail.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
To: Randy Bush <randy@psg.com>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: sidr wg list <sidr@ietf.org>
Subject: Re: [sidr] BGPSEC Threat Model ID
Precedence: list

On Fri, Nov 4, 2011 at 8:59 PM, Randy Bush <randy@psg.com> wrote:
>> Point being that in cases like this (or really all route leak cases)
>> the only thing that stops this is filtering routes between bgp peers.
>> (transits, customers, SFP peers) There isn't anything in the protocol
>> itself (which is Stephen's, Russ's, Randy's comment through out) that
>> tells you/me/them that 12989 should not be permitted to announce this
>> route. (looking at available data, it seems that they SHOULD, perhaps
>> not with this ASPath, but...)
>
> we can not know intent.
>
> to take it to one extreme, did the pakistani operator mean to 'leak'
> youtube's prefix or not?
>

right, the only save there is the filtering PCCW was not doing...
which was my point (I believe)

> randy
>

[sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Paul Hoffman
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Jen Linkova
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Sriram, Kotikalapudi
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson