Re: [sidr] BGPSec RFC status

"John G. Scudder" <jgs@juniper.net> Fri, 15 April 2016 18:10 UTC

Return-Path: <jgs@juniper.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2551412D6FF for <sidr@ietfa.amsl.com>; Fri, 15 Apr 2016 11:10:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LhQuwg_-1Iud for <sidr@ietfa.amsl.com>; Fri, 15 Apr 2016 11:10:05 -0700 (PDT)
Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0118.outbound.protection.outlook.com [207.46.100.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3147812D6B1 for <sidr@ietf.org>; Fri, 15 Apr 2016 11:10:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=QxEDfUNFYuOxAkyxPlUEcDrG9Bwm66+xS5bH5dasdKg=; b=ciwUp5Q7dA+dmfMicbxNJXLTYqRTc7XoZO7EcSMGQV/eOBLzbjAUZrjc7lLolsz2a1zh154xIngmf8FYfPsyUFPPeW9W0zq6jsfIx4x4Ad5VajuRYyco7v7gp+dyWdGynXKsf3COcHUaTmCLd9w3UNFWhdUzxQrf0P3KsAxJ7ds=
Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
Received: from [172.29.35.115] (66.129.241.11) by BLUPR05MB198.namprd05.prod.outlook.com (10.255.191.12) with Microsoft SMTP Server (TLS) id 15.1.453.26; Fri, 15 Apr 2016 18:10:03 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: "John G. Scudder" <jgs@juniper.net>
In-Reply-To: <570E8D44.1080208@bbn.com>
Date: Fri, 15 Apr 2016 14:09:58 -0400
Content-Transfer-Encoding: quoted-printable
Message-ID: <723CA032-880C-4B37-A8EC-35D67964BFDC@juniper.net>
References: <570E8D44.1080208@bbn.com>
To: sidr <sidr@ietf.org>
X-Mailer: Apple Mail (2.3124)
X-Originating-IP: [66.129.241.11]
X-ClientProxiedBy: BLUPR19CA0021.namprd19.prod.outlook.com (10.162.230.159) To BLUPR05MB198.namprd05.prod.outlook.com (10.255.191.12)
X-MS-Office365-Filtering-Correlation-Id: 6faa4ee7-afb1-49c0-28ab-08d365592b39
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB198; 2:1+X083LnyekC5H/HM33z6sPJmMnuqwcAn3m8Ap//1xF4oBXW4wROG9ZD9RzvWKoMFJjtBlENtqceLUwl617+b4K2QIuCH0fUQIPYhZX8xuNX4owJuxKja9bfcvEEInRfpDaqSyKJJuRLNAHjNCqFUSodd0dGHJPMK6kl59mGBQ0JR8siAKIeV+UVCoGwvT+o; 3:X54ha6ERUcvPjHgqy4WOztlKovNymXcy9PiULs3doLMCaIZvIYKk6K0vHp0jUu2hr2IxR0LO7uns2/LpSUPPGBRsW+w5/UGd3ZHu6M4zEJDWt0h9lgVaZonFXuntTNGX; 25:oAd28FCuvjsp+MqRKiNv9nidUTU77ez0Y5K/pk7mkPZzPjSBz8q9rmxcy0lK3nWQIaIjzSkaFKAj71OdejN10FJQOpBM4IsNi4dtiin5fEQDVueUigco7LG8xAyL2I8sH2bnizoeBoOda3zNkMfBueYW5GfymLvW9EzwZKzeuI6C+EkdWon/ETPN9xB6CFmbVilYW4EaBpaDKvzWV3pGEC1L2b75FMbNaRAtKZgFwZX26TDhPm4q8BdY4/b36JSFiDs0VvJdmJMnyK4IMhWI5JS1cbUn9JcU7NFOKoR6qYwZsLz2zUfgz24NOJ+alwSCBNjQBs5yzD9eSeP79S893w==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR05MB198;
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB198; 20: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; 4:u1isXwPjB4K5wlUlxNscufGDCl/51PGO2q4izTaCCSCyrV9o9UHllo0BN/SZxZHVSXuN6lwA9q2C21TCYTaFj8NLd5l6Fy1Zfwl9wGJaVc466VQWf16A0YPZOIqp+N1NPe2o/8H7cMKwlZkCD89+d1IDOLz60SMHnsuU/6yxSAHg4aUzPB05ornDFF5gYrC5pw4vQVptwURXdWN1X4ueIY42PfL7smdzLzlsaysASGOXcvAd0qgU1j3Ip69/EPzemtY+pmLOacMreZfJfIPPBGzjgcb7/7KMzmuWzP1VCYH06PVmT4D3ehxGMpl7IvRhICLMEVWA7BZEQankNEcymY5P1cCKAuRhf4Uy6LxPTDezCRQlfMyjbksDu4jgbLmV2oYwZgGlIsWbTzX2l6+u0T2XCzjs2WmFodZ/ikLgJzg=
X-Microsoft-Antispam-PRVS: <BLUPR05MB198FF410120A51719D1CB9AAA680@BLUPR05MB198.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(9101521026)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:BLUPR05MB198; BCL:0; PCL:0; RULEID:; SRVR:BLUPR05MB198;
X-Forefront-PRVS: 0913EA1D60
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(24454002)(377454003)(1096002)(189998001)(5004730100002)(19580395003)(19580405001)(47776003)(81166005)(23726003)(36756003)(42186005)(66066001)(86362001)(586003)(33656002)(57306001)(6116002)(3846002)(107886002)(97756001)(110136002)(2950100001)(50226001)(82746002)(450100001)(50466002)(77096005)(50986999)(2906002)(5008740100001)(92566002)(76176999)(46406003)(83716003)(104396002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR05MB198; H:[172.29.35.115]; FPR:; SPF:None; MLV:sfv; LANG:en;
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB198; 23: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
X-Microsoft-Exchange-Diagnostics: 1; BLUPR05MB198; 5:KiaFJo70gz0uQrbwqhWl5ZnKgvI6EqVmzGJ5/T+ovbLauOEK40+yCEFVIxAhy6qIUlxGfzAhCjCkXEwToo9y7RTm6ht2W68HfIWsWs5WeB88OHtFkGyOHmUhv1ZFHzlT/OXaQep6M+KltcQbX/NsZw==; 24:n2TUKIStgpVkfSMMMjDS4l/x4mHruW6Ck3/mVxTfVM9b2BUjE18iQjcVHaEALx384hO/KUWAalABT5X5mhnqJifHnVhjcq2b8dszngmEnxw=
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: NSPM
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Apr 2016 18:10:03.9316 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR05MB198
Archived-At: <http://mailarchive.ietf.org/arch/msg/sidr/RvOGJbMOU5bMDub3jpLjumQ2QZE>
Subject: Re: [sidr] BGPSec RFC status
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Apr 2016 18:10:07 -0000

All,

Thanks to Geoff and Tom for pointing out that we do have definitions of what PS and Experimental mean. If those definitions are wrong (c.f. some of the comments relating to whether some designation does or doesn't advance some greater good or agenda) is not a question for SIDR to decide -- if you don't like the definitions, propose revisions to RFCs 7127 and/or 2026.

Based on the definitions provided in those two RFCs, BGPSEC fits into the PS bucket. If there is debate about whether it falls short of any of the RFC 7127 criteria for PS, the best time to have raised that would have been at WGLC but of course there's still IESG review and IETF LC, so there's ample time for anyone who wants to be heard. 

$0.02 from this individual WG member,

--John

> On Apr 13, 2016, at 2:17 PM, Stephen Kent <kent@bbn.com> wrote:
> 
> I didn't attend the IETF meeting, but I did listen to the Wednesday SIDR session, at
> which the issue was raised as to whether the BGPSec RFC should be standards track
> or experimental.
> 
> I believe standards track is the right approach here. This document has been
> viewed as standards track since we began work on it long ago. It is the successor
> to the origin validation standards, addressing the residual vulnerabilities that
> persist based on that use of the RPKI. From the perspective of promoting adoption
> it is critical that this remain a standards track document; router vendors will
> be unlikely to devote resources to design and implementation if BGPsec is labeled
> experimental. I agree that this is new technology, but I heard that we already have
> a  couple of implementations already, and we may discourage others from continuing to
> work on BGPSec implementations if we downgrade the status of the RFC. The design has
> evolved to accommodate real-world routing deployment topics such as the role of IXPs
> and AS migration. In my long experience in the IETF experience, the level of attention
> to these an analogous details makes BGPsec a very solid candidate for standards track
> publication.
> 
> Steve