Re: [sidr] BGPSEC Threat Model ID

[Randy Bush <[e-mail]>]

> 5) I totally agree that route leaks don't violate BGP as a protocol
> and are related to policies. But it doesn't mean route leaks are not
> security threats. Receiving spam/viruses via email is a threat
> although it doesn't violate any SMTP standards.
> 
> 6) route leaking is related to a BGP threat model and isn't specific
> to BGPSEC, and BGPSEC doesn't provide any protection from that threat.
> So I'd like to second the idea of clarifying that in the document.

could someone post a clear technical explanation of WHAT a route leak
is, HOW one would definitively detect all cases of them, and WHAT one
would do about it?

you are correct, BGPsec tries to secure the BGP protocol against abuse,
not protect the internet.  the latter is a very worthy goal but a bit
nebulous.  of course an internet draft or two might clarify that.

randy