Re: [sidr] BGPSEC Threat Model ID

Randy Bush <randy@psg.com> Wed, 02 November 2011 18:00 UTC

Date: Wed, 02 Nov 2011 19:00:17 +0100
Message-ID: <m2sjm6be1a.wl%randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Russ White <russw@riw.us>
In-Reply-To: <4EB180DD.5010401@riw.us>
References: <E96517DD-BAC7-4DD8-B345-562F71788C6A@tcb.net> <p06240807cad42f85eb7d@193.0.26.186> <32744.216.168.239.87.1320175657.squirrel@webmail.tcb.net> <p06240801cad6ab773279@193.0.26.186> <CAH1iCir-UoT+BMOD53oxQ9fdMiGirvaTL0eZDS3A5wVEDuw2LA@mail.gmail.com> <4EB170AD.1030302@riw.us> <CAH1iCiqTST7V=jdHe8R04nfP-0c33NSo9m4gZ_majpx7wUCciw@mail.gmail.com> <4EB180DD.5010401@riw.us>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset="US-ASCII"
Cc: sidr@ietf.org
Subject: Re: [sidr] BGPSEC Threat Model ID
Precedence: list

> 1. Most providers apparently want to enforce policy without telling
> anyone what their policy actually is. That this is a logical
> contradiction doesn't seem to disturb anyone.

Policy on the global Internet changes every 36ms, new circuits, new
customers, new peers, ...

We already have a protocol to distribute policy or its effects, it is
called BGP

We can not know intent, should Mary have announced the prefix to Bob

But Joe can formally validate that Mary did announce the prefix to Bob

BGPsec validates that the protocol has not been violated, and is not
about intent or business policy

randy

[sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Paul Hoffman
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Jen Linkova
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Sriram, Kotikalapudi
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson