[152448] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: rpki vs. secure dns?

daemon@ATHENA.MIT.EDU (Randy Bush)
Mon Apr 30 10:17:39 2012

Date: Mon, 30 Apr 2012 10:05:21 -0400
From: Randy Bush <randy@psg.com>
To: Stephane Bortzmeyer <bortzmeyer@nic.fr>
In-Reply-To: <20120430135346.GA7454@nic.fr>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

> I want to be sure of the terminology: what is deployed presently is
> the bundle RPKI+ROA. As their name say, ROA can only be used against
> origin attacks. But RPKI can be used for other things than RPKI+ROA,
> including BGP-sec (against path-based attacks), no?

wfm


home help back first fref pref prev next nref lref last post