Re: [sidr] BGPSEC Threat Model ID

[Stephen Kent <[e-mail]>]

At 6:56 AM +1100 11/10/11, Geoff Huston wrote:
>...
>I did not claim it existed - I merely disagreed with the claim of its
>impossibility of existence.

OK.

>In the same way that the only way you can eliminate the "unknown" validation
>outcome is to achieve universal adoption of the generation of credentials,
>the general visibility of intent relies on universal adoption on the 
>generation
>of routing policy. It is not impossible per se, it just relies on 
>universal adoption!

agreed.

>In the case of the efforts relating to RPSL, reality has not 
>achieved such targets
>of universal adoption, as you point out.

OK.

>In the case of the efforts relating to the BGP security mechanisms 
>you are working
>on, it is an open issue as to how many folk would adopt it, but our 
>experiences
>of other technologies, including 4 byte ASN support indicate that universal
>adoption is an extremely challenging objective.

no argument.

Thanks for the thoughtful, detailed reply.

Steve