Subject: [saag] NIST draft report on routing security

From: Melchior Aelmans <[email-masked]>
Date: Wed, 30 Oct 2019 11:38:22 -0500

Hi SAAG,

Just a few remarks and questions I spotted after  reading
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-189-draft2.pdf
;

- Security recommendation 35: why only filter customer sessions with ROA
data? Shouldn't filtering take place on all EBGP sessions?

- Currently the draft only links to the RIPE validator; shouldn't links be
included to NLnet Labs and Cloudflare OctoRPKI for example?

- Security recommendation 51: why only “smaller ISPs”?

Cheers,
Melchior