[Fwd: Re: [lisp-interest] LISP-ALT and security]

[Erik Nordmark <erik.nordmark@sun.com>]

[Retransmit]

-------- Original Message --------
Subject: Re: [lisp-interest] LISP-ALT and security
Date: Thu, 31 Jul 2008 02:02:07 -0700
From: Erik Nordmark <erik.nordmark@sun.com>
To: bensons@riot.queuefull.net
CC: Scott Brim <swb@employees.org>, 
owner-list-interest@lists.civil-tongue.net,        Roque Gagliano 
<rgaglian@fing.edu.uy>,        lisp-interest@lists.civil-tongue.net
References: 
<245483372-1217441290-cardhu_decombobulator_blackberry.rim.net-1673143275-@bxe036.bisx.prod.on.blackberry>

bensons@riot.queuefull.net wrote:
> Though, the replying eTR may not represent the whole RIR-assigned prefix. Perhaps you're saying that the RIR would sign a statement indicating how the LIR may/will allocate subnets (I.e. /24 nets) from the supernet? And these would be distributed to iTR nodes beforehand or looked up against a directory or table on the fly? That doesn't sound practical, but maybe I don't understand correctly.

From a security perspective there isn't an issue with allowing an ETR
who has authority to speak for /22 EID prefix to provide separate
information (priorities, weights, even RLOCs) for different sub-sets of
that /22.

(It might have an impact on scaling, but that is a different matter.)

   Erik