[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

rpki vs. secure dns?

Subject: rpki vs. secure dns?
From: danny at tcb.net (Danny McPherson)
Date: Mon, 30 Apr 2012 10:53:05 -0400
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]>

On Apr 28, 2012, at 6:34 AM, Alex Band wrote:

>  All in all, RPKI has really good traction and with native router support in Cisco, Juniper and Quagga, this is only getting better. 

We should be more careful with statements such as this, they're conflating important things that add to the confusion in this area.

None of these implementations support "RPKI" today.  What they support is a new protocol for onboarding routing policy data (some call this a [VRP],  essentially prefix,origin bindings) into soft state in a router.

-danny

[VRP] https://ripe64.ripe.net/presentations/74-120417.sidr-origin.pdf

Follow-Ups:
- rpki vs. secure dns?
  - From: dburk at burkov.aha.ru (Dmitry Burkov)

References:
- rpki vs. secure dns?
  - From: vixie at isc.org (Paul Vixie)
- rpki vs. secure dns?
  - From: fw at deneb.enyo.de (Florian Weimer)
- rpki vs. secure dns?
  - From: alexb at ripe.net (Alex Band)

Prev by Date: rpki vs. secure dns?
Next by Date: rpki vs. secure dns?
Previous by thread: rpki vs. secure dns?
Next by thread: rpki vs. secure dns?
Index(es):
- Date
- Thread