> In my opinion the biggest open issue in the bgpsec protocol draft is the 
> confederation issue that we discussed at the previous interim. (That is, 
> if we don't include AS4_Path or AS_Path in a bgpsec signed update, then 
> we need to somehow encode the information that would be in the 
> AS_confed_sequence segments of the AS_Path.)

i thought we were cheerily dumping as_confed_seq and thereby getting rid
of the last sequence.  essentially 
  o you are at the border about to send to an external peer
  o stepping back down the sigs, possibly zero times
  o there will be a sig from an external peer to the confed as
  o strip off all sigs subsequent to that one, if any
  o sign from the confed as to the external peer

randy
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to