o with sbgp, the assertion of the validity of asn A announcing prefix P to asn B is congruent with the bgp signaling itself, A merely signs the assertion in the bgp announcement.
o with sobgp, the assertion is in an external database with issues such as - data correctness & completeness
The database is built just like BGP routing information databases are built today. Each AS originates their piece, and every other AS puts the pieces together to form the whole. There is no centralized registry.
- data consistency - update frequency
These two are up to the originating AS'. If you update your certificates in real time, the same way you do your routes (and I can easily argue you don't actually update your routes in real time, actually), then you will get congruent, up to date information. Those AS' who do not update their certificates in real time will not have real time data in the database, just like BGP is today.
- granularity (bgp is per-prefix, and this is used by real folk to do traffic eng etc). consider the mess of keeping this up to date and correct in a super irr.
There is no "super irr." There is no centralized database in soBGP. Period. :-) Russ __________________________________ riw@cisco.com CCIE <>< Grace Alone