[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [RRG] interesting presentations from RIPE



On Thu, 2008-05-08 at 10:05 +0200, Simon Schuetz wrote:
> If this is true (and I wouldn't be surprised), how would LISP or any other proposal without added security features help here?
> 
> Even though LISP, Six/One, etc helps to make aggregation easier, would ISPs still de-aggregate for the security reasons?

With LISP, I think it is more likely that those who operate today's DFZ
will implement strict prefix-length-filtering based on registry
allocation block-sizes. That would stop small-block-hijacking through
the DFZ, but then you need to secure LISP ...


//per




--
to unsubscribe send a message to rrg-request@psg.com with the
word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/rrg/> & ftp://psg.com/pub/lists/rrg