Re: Comments on ISP Expectations

[Randy Bush <randy@psg.com>]

>> 2.2 Information Sharing
>> ISPs SHOULD have clear policies and procedures on the sharing of
>> information about a security incident
> ...clear public policies...

why public?

>> 4.1 Registry Data Maintenance
>> ISPs should 'SWIP' (Shared WhoIs Project) the address space that 
>> they assign to their customers
> ...or maintain an rwhois server within the rwhois delegation tree.

both are current jargon words.  something like "publicly register" might be
less ephemeral.

>> BGP authentication should be used with routing peers.
> Nobody does this in the real world.

maybe nobody small, and even this is changing.

>> 4.3 Ingress Filtering on Source Address
>> such filtering can cause difficulty for mobile users.
> How so?

the internal address comes from the outside using protocol 55.

randy