> AS_PATH specifies the ASs through which the routing announcement has
> passed.
> 
>> Signed_AS_PATH is to verify the path that the update message takes.

....

> and here i thought that detecting that they differ, as an attack, is the
> core goal of as-path validation.

Okay, I seem to be confused. The AS Path isn't about where the update
has passed through, but the same attribute, when signed, is a mechanism
to provide security. And while the AS Path isn't about showing the path
of the update or the traffic, when it doesn't match the new attribute
that is supposed to show the path of the update this means there is an
attack of some sort.

Russ

-- 
<><
[email protected]
[email protected]
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to