Re: soBGP deployment

* Steven M. Bellovin:

Fundamentally, the answer to this question is this: how accurate do you think the routing registries are?

I don't think it's important how accurate they are *now*, but how accurate they will be when some "secure" BGP version makes them (or, more precisely, the route registration process) the weakest link in the chain. The fact that careful checking on the ISP side protects other ISPs only (and your own business interests just in a very indirect fashion) makes me believe that securing BGP will be *very* hard.