Hi!

On 5/5/16 6:51 PM, Randy Bush wrote:
>>> mostly because I don't see a clear method to ensure that 'third party' has:
>>>   1) up-to-date information
>>   Same with RTR cache server.
> 
> i would not load routers from rpki caches i do not own and control

Me neither. Yet people do it. Whether they are going to be majority or
not, time will tell.

> 
>>>   2) my best interest at heart
>>   If you peer with a route server, you should establish a trust relation 
>> anyway.
> 
> in my heart i agree with chris, a prudent operator does not outsource
> security.
> 
> otoh, i also do not think a prudent operator outsources bgp, i.e. uses a
> route server.
> 
> putting the two together, if you are willing to outsource bgp to a route
> server, then outsourcing bgp security to the route server is not much of
> a leap.

Agree 100%.

> 
> chris, think of it as shooting yourself in the foot with a two-barrelled
> gun instead of one with one barrel.  :)

:-)

-C.

_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to