nanog mailing list archives
Re: BGP security in practice
From: Eric Anderson <anderson () cs uoregon edu>
Date: Mon, 4 Nov 2002 10:59:18 -0800
Yes, but... A protocol in which principal A's misconfiguration can seriously harm principle B is more broken than one in which it cannot. That's why the protocol for crossing a busy street includes "In addition to the light status, look for actual moving vehicles." That way, you don't get run over by someone else's misconfiguration. Time for a new metaphor, methinks. - Eric Anderson Thus spake alex () yuriev com (alex () yuriev com):
Every protocol is vulnerable if the principals are mis-configured (i.e. do not follow the protocol). The protocol for crossing a busy street at the light involves checking for the green light before crossing the street. A mis-configured principal checks the light, ignores red or yellow, and immediately crosses. Does it mean that the protocol is broken or does it mean that a principal is broken?
P.S. In this specific case I am strictly looking at "misconfiguration causes problems" implies brokenness of the protocol.
Current thread:
- Re: BGP security in practice alex (Nov 04)
- Re: BGP security in practice Eric Anderson (Nov 04)
- Re: BGP security in practice Vadim Antonov (Nov 04)
- Re: BGP security in practice Eric Anderson (Nov 04)