Re: [sidr] revision to draft-ietf-sidr-roa-validation

George Michaelson <ggm@apnic.net> Mon, 03 August 2009 02:14 UTC

Return-Path: <ggm@apnic.net>
X-Original-To: sidr@core3.amsl.com
Delivered-To: sidr@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 73ABB3A6C65 for <sidr@core3.amsl.com>; Sun, 2 Aug 2009 19:14:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.809
X-Spam-Level:
X-Spam-Status: No, score=0.809 tagged_above=-999 required=5 tests=[BAYES_40=-0.185, RELAY_IS_203=0.994]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4SBXMp8ObHXM for <sidr@core3.amsl.com>; Sun, 2 Aug 2009 19:14:07 -0700 (PDT)
Received: from asmtp.apnic.net (oregano.apnic.net [IPv6:2001:dc0:2001:a:4608::60]) by core3.amsl.com (Postfix) with ESMTP id 7C19C3A683E for <sidr@ietf.org>; Sun, 2 Aug 2009 19:14:06 -0700 (PDT)
Received: from dynamic157.apnic.net (dynamic157.apnic.net [203.119.42.157]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 83783110066 for <sidr@ietf.org>; Mon, 3 Aug 2009 12:14:05 +1000 (EST)
Message-Id: <FB007FC8-CFD4-4674-9BFE-0A7B593C0600@apnic.net>
From: George Michaelson <ggm@apnic.net>
To: sidr@ietf.org
In-Reply-To: <11CC0A9E-2829-46E2-BD7B-136DF96E58C7@apnic.net>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v935.3)
Date: Mon, 03 Aug 2009 12:14:05 +1000
References: <561CF52A-FFDE-409A-81B4-0A68F5C73718@apnic.net> <11CC0A9E-2829-46E2-BD7B-136DF96E58C7@apnic.net>
X-Mailer: Apple Mail (2.935.3)
Subject: Re: [sidr] revision to draft-ietf-sidr-roa-validation
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Aug 2009 02:14:08 -0000

On 30/07/2009, at 8:59 PM, Geoff Huston wrote:

> WG Chair hat off
>
> It is my impression from the WG discussion at IETF 75 on the  
> interpretation of a ROA that there is a common view that a ROA acts  
> as an implicit "denial" for those route objects that have address  
> prefixes that are more specific than the set of prefixes specified  
> in the ROA, and for those route objects which have originating AS  
> numbers other than those listed in valid ROAs that span the address  
> prefix listed in the route object.
>
> I therefore propose to the WG that I will resubmit draft-huston-sidr- 
> roa-validation-01.txt as draft-ietf-sidr-roa-validation-02.txt on  
> the basis that this appears to be consistent with the discussion I  
> have just heard in the WG meeting this morning.
>
> thanks,.
>
> Geoff
>

As co-author of the draft-ietf-sidr-roa-validation I also observe that  
the WG has no interest in pursuing a BOA based model (an explicit  
denial structure) and that the revised draft therefore aligns with  
people's expectations in documenting the validation process.

-George