Re: [lisp-interest] LISP-ALT and security

[Roque Gagliano <rgaglian@fing.edu.uy>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Erik,

That was what I was suggesting in my previous email, you can issue  
signed material (similar to ROAs for ASNs)  using RPKI certs that ties  
the prefixes allocated from RIRs to the RLOCs you select. The issue  
here is if this is an off-line or on-line (inside lisp??) exchange.

Roque


On Jul 30, 2008, at 11:57 AM, Erik Nordmark wrote:

> My question to Vince at the mike in the explisp bof was:
>
> Your example has a /24 EID prefix for the site on the right hand of  
> the
> slide.
> When its ETR sends back a map-reply is there a mechanism that prevents
> the ETR from using e.g., /16 instead of /24 as the prefix length in  
> the map-reply?
>
> AFAIU the security mechanisms in BGP doesn't help with this, since the
> map-reply is sent directly back to the ITR.
>
>   Erik

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkiQUIEACgkQnk+WSgHpbO70NACgxqjVYtIHK2dVOoQaXjXnJMQY
IgkAoIC4U7cCJEmmuKYYcFGMjmTEmcA4
=sPND
-----END PGP SIGNATURE-----