[152448] in North American Network Operators' Group
Re: rpki vs. secure dns?
daemon@ATHENA.MIT.EDU (Randy Bush)
Mon Apr 30 10:17:39 2012
Date: Mon, 30 Apr 2012 10:05:21 -0400
From: Randy Bush <randy@psg.com>
To: Stephane Bortzmeyer <bortzmeyer@nic.fr>
In-Reply-To: <20120430135346.GA7454@nic.fr>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
> I want to be sure of the terminology: what is deployed presently is
> the bundle RPKI+ROA. As their name say, ROA can only be used against
> origin attacks. But RPKI can be used for other things than RPKI+ROA,
> including BGP-sec (against path-based attacks), no?
wfm