Reaching out to ARIN members about their RPKI INVALID prefixes

Tue Sep 18 18:06:48 UTC 2018

On Tue, Sep 18, 2018 at 10:36 AM Job Snijders <job at ntt.net> wrote:

> Owen,
>
> On Tue, Sep 18, 2018 at 10:23:42AM -0700, Owen DeLong wrote:
> > Personally, since all RPKI accomplishes is providing a
> > cryptographically signed notation of origin ASNs that hijackers should
> > prepend to their announcements in order to create an aura of
> > credibility, I think we should stop throwing resources down this
> > rathole.
> I think you underestimate how valuable RPKI based Origin Validation
> (even just by itself) is in today's Internet landscape.
>
> If you are aware of other efforts or more fruitful approaches please let
> us know.
>
>
Perhaps said another way:

"How would you figure out what prefixes your bgp peer(s) should be sending
you?"
   (in an automatable, and verifiable manner)

-chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20180918/694c68e3/attachment.html>