How to preempt rogue RAs?

Francis Dupont Francis.Dupont at
Mon Nov 1 16:34:45 CET 2010

 In your previous mail you wrote:

   Sure, SEND/CGA is cool.

=> please note if SEND protects you against attacks, it does
nothing against a configuration error, i.e., it doesn't protect
against trusted junk infos.


Francis.Dupont at

PS: technically the part of SEND used for RAs is a PKI, in fact
the RPKI, not the CGA part.

More information about the ipv6-ops mailing list