rpki vs. secure dns?

Stephane Bortzmeyer bortzmeyer at nic.fr
Mon Apr 30 08:53:46 CDT 2012


On Mon, Apr 30, 2012 at 09:41:51AM -0400,
 Russ White <russw at riw.us> wrote 
 a message of 60 lines which said:

> Neither a DNS based solution nor the RPKI will resolve path attacks,

I want to be sure of the terminology: what is deployed presently is
the bundle RPKI+ROA. As their name say, ROA can only be used against
origin attacks. But RPKI can be used for other things than RPKI+ROA,
including BGP-sec (against path-based attacks), no?




More information about the NANOG mailing list