[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

rpki vs. secure dns?

Subject: rpki vs. secure dns?
From: alexb at ripe.net (Alex Band)
Date: Sat, 28 Apr 2012 20:14:27 +0200
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]> <[email protected]>

On 28 Apr 2012, at 19:45, Nick Hilliard wrote:

> On 28/04/2012 18:27, Phil Regnauld wrote:
>> 	To me that seems like the most obvious problem, but as Alex put it,
>> 	"Everyone has the ability to apply an override on data they do not trust,
>> 	or have a specific local policy for."
> 
> So what do you suggest to do with a roa lookup which returns "Invalid"?

In case you feel a BGP announcement should not be "RPKI Invalid" but something else, you do what's described on slide 15-17:

https://ripe64.ripe.net/presentations/77-RIPE64-Plenery-RPKI.pdf

-Alex

Follow-Ups:
- rpki vs. secure dns?
  - From: rubensk at gmail.com (Rubens Kuhl)

References:
- rpki vs. secure dns?
  - From: vixie at isc.org (Paul Vixie)
- rpki vs. secure dns?
  - From: fw at deneb.enyo.de (Florian Weimer)
- rpki vs. secure dns?
  - From: alexb at ripe.net (Alex Band)
- rpki vs. secure dns?
  - From: fw at deneb.enyo.de (Florian Weimer)
- rpki vs. secure dns?
  - From: alexb at ripe.net (Alex Band)
- rpki vs. secure dns?
  - From: nick at foobar.org (Nick Hilliard)
- rpki vs. secure dns?
  - From: regnauld at nsrc.org (Phil Regnauld)
- rpki vs. secure dns?
  - From: nick at foobar.org (Nick Hilliard)

Prev by Date: rpki vs. secure dns?
Next by Date: rpki vs. secure dns?
Previous by thread: rpki vs. secure dns?
Next by thread: rpki vs. secure dns?
Index(es):
- Date
- Thread