On Wed, Apr 11, 2012 at 12:17 PM, Jakob Heitz <[email protected]> wrote:
> Confeds are out of scope.

how are confeds out of scope?
if you want path validation for ibgp/originated-by-you routes and the
originating router is in one of the confed sub-ases you have that
router sign with the confed-external/public asn, no? I'm fairly
certain we planned to support this sort of activity... though I could
be missing the part which is out-of-scope?

> IOW, the BGPSEC validity of an update does not necessarily
> prevent you from using the update if you have inside knowledge
> about AS path mucking. How you use the BGPSEC validity in
> your route selection is a private matter.

yes, which is, I think, nice.
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to