> 5) I totally agree that route leaks don't violate BGP as a protocol > and are related to policies. But it doesn't mean route leaks are not > security threats. Receiving spam/viruses via email is a threat > although it doesn't violate any SMTP standards. > > 6) route leaking is related to a BGP threat model and isn't specific > to BGPSEC, and BGPSEC doesn't provide any protection from that threat. > So I'd like to second the idea of clarifying that in the document.
could someone post a clear technical explanation of WHAT a route leak is, HOW one would definitively detect all cases of them, and WHAT one would do about it? you are correct, BGPsec tries to secure the BGP protocol against abuse, not protect the internet. the latter is a very worthy goal but a bit nebulous. of course an internet draft or two might clarify that. randy _______________________________________________ sidr mailing list sidr@ietf.org https://www.ietf.org/mailman/listinfo/sidr