Re: [sidr] Injecting idea of "freshness of repository data" into BGP

Jeffrey Haas <jhaas@pfrc.org> Wed, 28 March 2012 08:57 UTC

Return-Path: <jhaas@slice.pfrc.org>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F397F21F899B for <sidr@ietfa.amsl.com>; Wed, 28 Mar 2012 01:57:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.155
X-Spam-Level:
X-Spam-Status: No, score=-102.155 tagged_above=-999 required=5 tests=[AWL=0.110, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bumkkzPC7uIi for <sidr@ietfa.amsl.com>; Wed, 28 Mar 2012 01:57:03 -0700 (PDT)
Received: from slice.pfrc.org (slice.pfrc.org [67.207.130.108]) by ietfa.amsl.com (Postfix) with ESMTP id 7111E21F8946 for <sidr@ietf.org>; Wed, 28 Mar 2012 01:57:03 -0700 (PDT)
Received: by slice.pfrc.org (Postfix, from userid 1001) id 35077170414; Wed, 28 Mar 2012 04:57:03 -0400 (EDT)
Date: Wed, 28 Mar 2012 04:57:03 -0400
From: Jeffrey Haas <jhaas@pfrc.org>
To: Terry Manderson <terry.manderson@icann.org>
Message-ID: <20120328085703.GA21657@slice>
References: <20120328081939.GA19843@slice> <CB99092B.23A02%terry.manderson@icann.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CB99092B.23A02%terry.manderson@icann.org>
User-Agent: Mutt/1.5.20 (2009-06-14)
Cc: "sidr@ietf.org" <sidr@ietf.org>
Subject: Re: [sidr] Injecting idea of "freshness of repository data" into BGP
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Mar 2012 08:57:04 -0000

On Wed, Mar 28, 2012 at 01:30:03AM -0700, Terry Manderson wrote:
> I think this is interesting. I think I would further like an
> assessment/disussion of this "serial number" being consistent between the
> BGP information, the RPKI repository, and this through the validated cache
> and presented to the router via rpki-rtr.

Would it be sufficient to put have the latest manifestNumber (from RFC 6486)
be distributed as a single "route" signed using the normal BGPSEC
procedures?

With my usual apologies, I'm less clear on whether it's likely there will be
more than one manifest on a per AS basis.


-- Jeff