Hi, On Thu, Oct 22, 2026 at 09:50:37AM +0200, Tim Bruijnzeels wrote:
Please note that BGPsec is complementary to ROAs/ROV and ASPA. BGPsec focuses specifically on preventing spoofing of the path. It does not check the route origins, as ROAs/ROV do, or detect route leaks, as ASPA does.
My understanding is that BGPsec specifically allows signing of the origin, and crypto *validation* of the origin (= the spoofed-origin attacks against ROA/ROV get addressed by that). So benefit, even if the path might see still spoofery. But that might be a misunderstanding, which is one of the reasons why I asked the WG chairs for some more material on this @ the next WG session :-) Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet GmbH Geschäftsführer: Sebastian v. Bomhard, Joseph-Dollinger-Bogen 14 Maja von Bomhard D-80807 München HRB: 317057 (AG München) Tel.: (089) 32356-0 USt-IdNr.: DE813185279