Skip to content

Commit 87db054

Browse files
committed
note importance of protecting RPKI repositories
1 parent b1e545c commit 87db054

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

infra.rst

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -367,7 +367,10 @@ willing to accept. Note the contrast to prior uses of certificates we
367367
have seen: a router builds a complete picture of the certificate
368368
hierarchy *a priori* in readiness for subsequent routing decisions,
369369
rather than checking the validity of certificates as part of
370-
establishing a session (as happens in TLS, for example).
370+
establishing a session (as happens in TLS, for example). The
371+
repositories now become an essential part of our routing
372+
infrastructure and must themselves be secured and protected against
373+
DoS attacks.
371374

372375
There is a well-established set of software tools to automate the
373376
process of leveraging the RPKI for popular operating systems and

0 commit comments

Comments
 (0)