How to preempt rogue RAs?

Francis Dupont Francis.Dupont at fdupont.fr
Mon Nov 1 16:34:45 CET 2010


 In your previous mail you wrote:

   Sure, SEND/CGA is cool.

=> please note if SEND protects you against attacks, it does
nothing against a configuration error, i.e., it doesn't protect
against trusted junk infos.

Regards

Francis.Dupont at fdupont.fr

PS: technically the part of SEND used for RAs is a PKI, in fact
the RPKI, not the CGA part.


More information about the ipv6-ops mailing list