Re: [sidr] BGPSEC Threat Model ID

[Paul Hoffman <[e-mail]>]

On Nov 3, 2011, at 8:43 AM, Stephen Kent wrote:

>> If you're intended to play the "charter says .." card then we're wasting our time.
> 
> Yes, we are both wasting our time at this stage.


Maybe not. The charter does not say "every other topic cannot even be mentioned": instead, the charter limits the topics that are meant to be fully covered by the protocols.

Personally, I would prefer to see the threat model document say in the introduction "the following topics are considered to be BGP security threats but are not dealt with in this document:" followed by a list that includes route leakage (with a concise definition of what is meant by it in this context). A similar statement in the Security Considerations section would also be useful for the people who tend to skip introductions but still need to know the limitations of the document.

--Paul Hoffman