On 02/18/11 12:11, John Leslie wrote:
> Russ White <r...@cisco.com> wrote:
>> To: Christopher Morrow <christopher.mor...@gmail.com>
>>
>>> * Is an Autonomous System (AS) authorized to originate an IP prefix
>>> * Is the AS-Path represented in the route the same as the path
>>>   through which the route update traveled
>>
>> As we've been discussing on the list --I don't think this is a good
>> goal. The first goal should be to determine what it is we want to show
>> about the AS Path in relation to other things, and then work on filling
>> that goal.
> 
>    The question I think we ought to care about is:
> 
> Is the NLRI from this peer more or less likely than some other peer's NLRI
> to represent what a legitimate originator would want me to see?
>
>    All I really have control over is which peer I send to (and thus
> which NLRI I forward to my peers). I have no control over what happens
> to the packets after than first forwarding step.

we can't (and shouldn't conflate here) packet security with routing
(routing data, really) security.
_______________________________________________
sidr mailing list
sidr@ietf.org
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to