North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: BGP Security and PKI Hierarchies (was: Re: Wifi Security)

  • From: Randy Bush
  • Date: Wed Nov 23 22:43:26 2005

> We need prefix ownership certs; these need a special field identifying the
> prefix owned.  (See RFC 3779, which also describes AS certificates).  We
> need the latter in CA form, for delegation.

sorry to complicate, by iana allocates as ranges which are then
subbed to rirs.  so the ca bit could be set on these