Hi Joel, > The third question is actually the most important. Given > that operators > would ahve to choose to enable this new behavior, is there any > indication that they would do so? I have heard reports that some > operators have started turning off IGP authentication, or > using it only > as a stronger packet checksum. In either case, this does not > add value > for those operators.
http://www.ietf.org/id/draft-jakma-ospf-integrity-00.txt should work for operators who are only turning on OSPF authentication as a substitute for a stronger packet checksum. I had posted a survey on nanog (we had also exchanged a mail on this) on the same and while I only got 7 responses, 4 of those stated that they were indeed using IGP crypto only to get a better checksum mechanism. Cheers, Manav > > Yours, > Joel M. Halpern > > On 10/11/2010 9:09 AM, Bhatia, Manav (Manav) wrote: > > _______________________________________________ OSPF mailing list [email protected] https://www.ietf.org/mailman/listinfo/ospf
