This discusses neighboring networks, and local scope, so one would assume in most cases these are directly connected peers (or not many hops away), I think the security section should recommend use of GTSM on such sessions.
Then it can't easily be spoofed outside of the local network. if (initial_ttl!=255) then (rfc5082_compliant==0) [email protected]<mailto:[email protected]> ________________________________ From: GROW [[email protected]] on behalf of Randy Bush [[email protected]] Sent: Friday, August 05, 2016 9:43 PM To: Christopher Morrow Cc: GMO Crops; The IESG Subject: Re: [GROW] Stephen Farrell's Discuss on draft-ietf-grow-blackholing-02: (with DISCUSS and COMMENT) > doesn't look new to me, no. and 'worse', today someone COULD just (if > they are in the right place and can do bgp packet creation,etc) just > tag all of your announcments to your provider(s) with the local > provider version of this community, blackholing all of your traffic. note the string of "if"s. this proposal removes them. the attacker can be anywhere, and need forge nothing. and there's the rub; well-known and transitive. randy _______________________________________________ GROW mailing list [email protected] https://www.ietf.org/mailman/listinfo/grow This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
_______________________________________________ GROW mailing list [email protected] https://www.ietf.org/mailman/listinfo/grow
