On Nov 30, 2012, at 1:37 PM, Montgomery, Douglas wrote:

>> 
>> The RPKI needs to react in seconds, rather than minutes, hours, or days.
> 
> Based upon what analysis or requirement?

Good question Doug. 

Today I have a requirement as an operator to mitigate DDoS attacks in seconds 
to single digit minutes and this commonly requires routing system changes that 
may not have been envisioned beforehand - hours and days of delay [imposed by a 
system that does little more than control what's routed - not if it's routed in 
a way I believe is secure] breaks this.

Where are the requirements that informed the current design?

-danny


_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to