BGP Security and PKI Hierarchies (was: Re: Wifi Security)

Randy Bush randy at psg.com
Thu Nov 24 03:42:21 UTC 2005


> We need prefix ownership certs; these need a special field identifying the
> prefix owned.  (See RFC 3779, which also describes AS certificates).  We
> need the latter in CA form, for delegation.

sorry to complicate, by iana allocates as ranges which are then
subbed to rirs.  so the ca bit could be set on these

randy




More information about the NANOG mailing list