Re: [sidr] [Idr] BGPSEC proposal to drop AS_PATH [was: Fwd: request for agenda items for interim meeting 6 Jun]

Robert Raszuk <robert@raszuk.net> Wed, 30 May 2012 12:01 UTC

Return-Path: <robert@raszuk.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63F1821F86FF for <sidr@ietfa.amsl.com>; Wed, 30 May 2012 05:01:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f24j+E5s5VTR for <sidr@ietfa.amsl.com>; Wed, 30 May 2012 05:01:39 -0700 (PDT)
Received: from mail1310.opentransfer.com (mail1310.opentransfer.com [76.162.254.103]) by ietfa.amsl.com (Postfix) with ESMTP id 8EA1A21F86F7 for <sidr@ietf.org>; Wed, 30 May 2012 05:01:39 -0700 (PDT)
Received: (qmail 22326 invoked by uid 399); 30 May 2012 12:01:38 -0000
Received: from unknown (HELO ?192.168.1.91?) (pbs:m42@mojaklasa.info@83.31.219.206) by mail1310.opentransfer.com with ESMTPM; 30 May 2012 12:01:38 -0000
X-Originating-IP: 83.31.219.206
Message-ID: <4FC60C21.6010108@raszuk.net>
Date: Wed, 30 May 2012 14:01:37 +0200
From: Robert Raszuk <robert@raszuk.net>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20120428 Thunderbird/12.0.1
MIME-Version: 1.0
To: Randy Bush <randy@psg.com>
References: <5BA9D6DE-BE0E-4922-9E09-7B85BD6F9342@juniper.net> <CE876529-6CDB-44ED-9184-CA73DFD2D048@juniper.net> <C37AE148-0873-4D9A-B1B2-1959A427435D@bgp.nu> <m2aa0qtuu4.wl%randy@psg.com>
In-Reply-To: <m2aa0qtuu4.wl%randy@psg.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: "idr@ietf.org List" <idr@ietf.org>, "sidr@ietf.org list" <sidr@ietf.org>
Subject: Re: [sidr] [Idr] BGPSEC proposal to drop AS_PATH [was: Fwd: request for agenda items for interim meeting 6 Jun]
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: robert@raszuk.net
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 May 2012 12:01:40 -0000

Let's observe that mangling with AS_PATH is usually done for a reason .. 
to achieve reachability to some set of prefixes which otherwise would be 
dropped.

So with this in mind a better question to think about from customer 
perspective is to choose either:

- unsecure but reachable Internet destinations
- secure Internet routing but unreachable destinations

Rgs,
R.

PS. I believe I have a solution to address both sides. Let me write it 
up and share in a week or two.

>> This leaves me feeling a little more sanguine about the
>> drop-the-AS_PATH idea, although I still think some more attention to
>> enumerating what knobs will fall by the wayside is advisable.
>
> as folk keep inventing new knobs, one question would seem to be whether
> the knob inventors will understand and accept the trust/threat model
> implications of knobs which force downgrade to non-sec.
>
> randy
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
>
>