nanog mailing list archives
Re: rpki vs. secure dns?
From: Dmitry Burkov <dburk () burkov aha ru>
Date: Mon, 30 Apr 2012 19:16:10 +0400
Danny, just one more comment. So named vendor's support can be the worst case when there are no practical ways to deploy and it is absolutely not clear - should we follow this hierarchical model - I think it is the key point as we pushed ourselves by inertia to this way of thinking. Imho - it is way to nowhere in such form We need more flexible, distributed architecture behind - no matter - which interests will be lobbied as we have got already. On Apr 30, 2012, at 6:53 PM, Danny McPherson wrote:
On Apr 28, 2012, at 6:34 AM, Alex Band wrote:All in all, RPKI has really good traction and with native router support in Cisco, Juniper and Quagga, this is only getting better.We should be more careful with statements such as this, they're conflating important things that add to the confusion in this area. None of these implementations support "RPKI" today. What they support is a new protocol for onboarding routing policy data (some call this a [VRP], essentially prefix,origin bindings) into soft state in a router. -danny [VRP] https://ripe64.ripe.net/presentations/74-120417.sidr-origin.pdf
Current thread:
- Re: rpki vs. secure dns?, (continued)
- Message not available
- Re: rpki vs. secure dns? Stephane Bortzmeyer (Apr 29)
- Re: rpki vs. secure dns? Matthias Waehlisch (Apr 29)
- Re: rpki vs. secure dns? David Conrad (Apr 29)
- Re: rpki vs. secure dns? Alex Band (Apr 29)
- Re: rpki vs. secure dns? Randy Bush (Apr 29)
- Re: rpki vs. secure dns? Nick Hilliard (Apr 29)
- Re: rpki vs. secure dns? Florian Weimer (Apr 30)
- Re: rpki vs. secure dns? Nick Hilliard (Apr 29)
- Re: rpki vs. secure dns? Alex Band (Apr 30)
- Re: rpki vs. secure dns? Danny McPherson (Apr 30)
- Re: rpki vs. secure dns? Dmitry Burkov (Apr 30)
- Re: rpki vs. secure dns? Randy Bush (Apr 30)
- Re: rpki vs. secure dns? Jared Mauch (Apr 30)
- Re: rpki vs. secure dns? Christopher Morrow (Apr 30)
- Re: rpki vs. secure dns? Dmitry Burkov (Apr 30)
- Message not available
- Re: rpki vs. secure dns? Stephane Bortzmeyer (Apr 28)
- Message not available
- Re: rpki vs. secure dns? Stephane Bortzmeyer (Apr 28)
- Re: rpki vs. secure dns? Alex Band (Apr 28)
- Re: rpki vs. secure dns? Stephane Bortzmeyer (Apr 28)