nanog mailing list archives

Re: "Defensive" BGP hijacking?


From: "Scott Weeks" <surfer () mauigateway com>
Date: Wed, 14 Sep 2016 00:09:51 -0700



--- dougm.work () gmail com wrote:
From: Doug Montgomery <dougm.work () gmail com>

If only there were a global system, with consistent and verifiable security
properties, to permit address holders to declare the set of AS's authorized
to announce their prefixes, and routers anywhere on the Internet to
independently verify the corresponding validity of received announcements.

*cough      https://www.nanog.org/meetings/abstract?id=2846     cough*
------------------------------------------------


Yes, RPKI.  That's what I was waiting for.  Now we can get to
a real discussion... ;-)

scott


Current thread: