On Dec 20, 2012, at 11:03 AM, Randy Bush wrote:

> bgpsec+rpki does not have the highly globally synced requirement.  

So, in bgpsec, you (as an RP) don't need to know ROAs a priori in order to 
validate routes as they arrive in updates?

> your
> application does.  you are tryin to add the requirement.  i agree with
> you that it should not be added.  

bgpsec (as currently outlined in the requirement-free draft) implicitly 
requires full replication of the rpki in order to make correct routing 
decisions.  _That_ system has this flaw, but I don't claim to own it. ;)

> thanks for understanding.

Clever! :-P

Eric
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to