On Thu, 2008-05-08 at 10:05 +0200, Simon Schuetz wrote: > If this is true (and I wouldn't be surprised), how would LISP or any other > proposal without added security features help here? > > Even though LISP, Six/One, etc helps to make aggregation easier, would ISPs > still de-aggregate for the security reasons?
With LISP, I think it is more likely that those who operate today's DFZ will implement strict prefix-length-filtering based on registry allocation block-sizes. That would stop small-block-hijacking through the DFZ, but then you need to secure LISP ... //per -- to unsubscribe send a message to [EMAIL PROTECTED] with the word 'unsubscribe' in a single line as the message text body. archive: <http://psg.com/lists/rrg/> & ftp://psg.com/pub/lists/rrg
