Re: [sidr] BGPSEC Threat Model ID

Randy Bush <randy@psg.com> Sat, 05 November 2011 00:59 UTC

Date: Sat, 05 Nov 2011 01:59:31 +0100
Message-ID: <m262iz2xl8.wl%randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Christopher Morrow <morrowc.lists@gmail.com>
In-Reply-To: <CAL9jLaZj1wcmDnbm1f9=csUv2Uuq_w3rS6UEYmUHAQDPWT9zFg@mail.gmail.com>
References: <E96517DD-BAC7-4DD8-B345-562F71788C6A@tcb.net> <p06240807cad42f85eb7d@193.0.26.186> <32744.216.168.239.87.1320175657.squirrel@webmail.tcb.net> <p06240801cad6ab773279@193.0.26.186> <D9A38669-883D-4090-9F95-BC5C63220950@tcb.net> <p06240801cad800485596@193.0.26.186> <EEBF68E0-FAD9-4AF3-B81B-78760D200D9B@tcb.net> <p06240808cad85ff73d61@193.0.26.186> <080F8FFF-D2C7-4414-B53A-233F88D2009F@vpnc.org> <CAFU7BATC-6DUDNuadakwSa5wj0ryy0=49=XveBXD5Wv=5JL-ag@mail.gmail.com> <m2aa8c489s.wl%randy@psg.com> <53FA9B4A-552C-4998-8F69-592A0F5AA13B@verisign.com> <CAL9jLaZj1wcmDnbm1f9=csUv2Uuq_w3rS6UEYmUHAQDPWT9zFg@mail.gmail.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset="US-ASCII"
Cc: sidr wg list <sidr@ietf.org>
Subject: Re: [sidr] BGPSEC Threat Model ID
Precedence: list

> Point being that in cases like this (or really all route leak cases)
> the only thing that stops this is filtering routes between bgp peers.
> (transits, customers, SFP peers) There isn't anything in the protocol
> itself (which is Stephen's, Russ's, Randy's comment through out) that
> tells you/me/them that 12989 should not be permitted to announce this
> route. (looking at available data, it seems that they SHOULD, perhaps
> not with this ASPath, but...)

we can not know intent.

to take it to one extreme, did the pakistani operator mean to 'leak'
youtube's prefix or not?

randy

[sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Paul Hoffman
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Jen Linkova
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Sriram, Kotikalapudi
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Stephen Kent