Re: [sidr] BGPSEC Threat Model ID

Christopher Morrow <morrowc.lists@gmail.com> Fri, 04 November 2011 21:08 UTC

MIME-Version: 1.0
Sender: christopher.morrow@gmail.com
In-Reply-To: <53FA9B4A-552C-4998-8F69-592A0F5AA13B@verisign.com>
References: <E96517DD-BAC7-4DD8-B345-562F71788C6A@tcb.net> <p06240807cad42f85eb7d@193.0.26.186> <32744.216.168.239.87.1320175657.squirrel@webmail.tcb.net> <p06240801cad6ab773279@193.0.26.186> <D9A38669-883D-4090-9F95-BC5C63220950@tcb.net> <p06240801cad800485596@193.0.26.186> <EEBF68E0-FAD9-4AF3-B81B-78760D200D9B@tcb.net> <p06240808cad85ff73d61@193.0.26.186> <080F8FFF-D2C7-4414-B53A-233F88D2009F@vpnc.org> <CAFU7BATC-6DUDNuadakwSa5wj0ryy0=49=XveBXD5Wv=5JL-ag@mail.gmail.com> <m2aa8c489s.wl%randy@psg.com> <53FA9B4A-552C-4998-8F69-592A0F5AA13B@verisign.com>
Date: Fri, 04 Nov 2011 17:08:35 -0400
Message-ID: <CAL9jLaZVbL=BKxDUg1H6bNZEm+LsXme6Z=7AKJ+G85kV=+2GPA@mail.gmail.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
To: Eric Osterweil <eosterweil@verisign.com>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Cc: sidr wg list <sidr@ietf.org>
Subject: Re: [sidr] BGPSEC Threat Model ID
Precedence: list

On Fri, Nov 4, 2011 at 3:05 PM, Eric Osterweil <eosterweil@verisign.com> wrote:
>> you are correct, BGPsec tries to secure the BGP protocol against abuse,
>> not protect the internet.  the latter is a very worthy goal but a bit
>> nebulous.  of course an internet draft or two might clarify that.
>
> This seems like a very pedantic distinction.  Having an AS' traffic routed through an invalid path seems like a BGP protocol abuse to me.  So, in that language, it seems to me that this issue is in scope (i.e. if the path is to be protected, then subverting it is an abuse).
>

oops, also, still not randy, but... there are lots of ways to bend
traffic in the wrong direction and still keep bgp data 'the same'. I'm
not sure fixing traffic paths is doable in BGP.

Do you see a way to do this in BGP?

-chris

[sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Paul Hoffman
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID George, Wes
Re: [sidr] BGPSEC Threat Model ID Jen Linkova
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Geoff Huston
Re: [sidr] BGPSEC Threat Model ID Stephen Kent
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Shane Amante
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Jakob Heitz
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Eric Osterweil
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Danny McPherson
Re: [sidr] BGPSEC Threat Model ID Christopher Morrow
Re: [sidr] BGPSEC Threat Model ID Brian Dickson
Re: [sidr] BGPSEC Threat Model ID Randy Bush
Re: [sidr] BGPSEC Threat Model ID Sriram, Kotikalapudi
Re: [sidr] BGPSEC Threat Model ID Russ White
Re: [sidr] BGPSEC Threat Model ID Stephen Kent