[14485] in North American Network Operators' Group
FYI: BGP Security Analysis
daemon@ATHENA.MIT.EDU (Ran Atkinson)
Mon Jan 5 10:45:41 1998
From: rja@corp.home.net (Ran Atkinson)
Date: Wed, 31 Dec 1997 11:15:55 -0800
To: nanog@merit.edu
Folks interested in Paul Vixie's recent thread (and others
interested in inter-domain routing) should read:
ftp://ds.internic.net/internet-drafts/draft-murphy-bgp-secr-00.txt
which is a preliminary security analysis of BGP.
It is also useful for folks to read draft-heffernan-* and to
actually deploy the TCP MD5 Authentication option for BGP sessions
(to protect against low-level attacks, not as protection for
bogus prefix advertisements from otherwise legitimate BGP peers).
Apologies for posting content onto NANOG and disturbing the
usual noise.
Ran
rja@home.net
