Re: Article: DoD, DoJ press FCC for industry-wide BGP security standard

[Josh Luthman <josh () imaginenetworksllc com>]

ROA isn't mandatory.  If it was, it would be a better comparison.  Still,
showing that low adoption rate shows the industry's interest in it.

I think we all see the problem, but is there a viable solution?  Is the
problem big enough to warrant the transition?

On Tue, Sep 20, 2022 at 2:29 PM Randy Bush <randy () psg com> wrote:

> > Does another barrier to entry make sense?
>
> ROV's ROA creation is a barrier to entry in north america, as discussed
> in another thread or see
>
>     https://scholarship.law.upenn.edu/faculty_scholarship/2035/
>
> there are other cultures where isp operational security is taken more
> seriously than power and money.
>
> > Do we trust the FCC to come up with an industry wide fool proof
> > (whatever that means) security standard?
>
> note that the DHS funded the development of both dns and routing
> security technology.  otoh, as other cultures, clue is not evenly
> distributed.
>
> the first step is said to be admitting one has a problem.
>
> randy