IETF Proceedings

IETF-96 Proceedings

Introduction | Area, Working Goup & BoF Reports | Plenaries | Training | Internet Research Task Force

Secure Inter-Domain Routing (sidr) (WG)

Minutes | Jabber Logs | Mailing List Archives

Additional information is available at tools.ietf.org/wg/sidr

Chair(s):

Routing Area Area Director(s):

Assigned Area Director

Alvaro Retana

Technical Advisor(s)

Steven M. Bellovin

Recordings:

Meeting Slides:

Blue Sheets:

bluesheets-96-sidr-01.pdf

Internet-Drafts:

BGPsec Router Certificate Rollover (23011 bytes)
The Resource Public Key Infrastructure (RPKI) to Router Protocol (75875 bytes)
BGPSec Considerations for AS Migration (35850 bytes)
Signaling Prefix Origin Validation Results from a Route-Server to Peers (11220 bytes)
Router Keying for BGPsec (31378 bytes)
BGPsec Operational Considerations (18289 bytes)
BGPsec Algorithms, Key Formats, & Signature Formats (15358 bytes)
BGP Prefix Origin Validation State Extended Community (10883 bytes)
RPKI Repository Delta Protocol (37302 bytes)
RPKI Validation Reconsidered (23654 bytes)
RPKI Certificate Tree Validation by a Relying Party Tool (28928 bytes)
A Profile for BGPsec Router Certificates, Certificate Revocation Lists, and Certification Requests (29317 bytes)
Use Cases for Localized Versions of the RPKI (10298 bytes)
Simplified Local internet nUmber Resource Management with the RPKI (26320 bytes)
BGPsec Protocol Specification (90225 bytes)
A Publication Protocol for the Resource Public Key Infrastructure (RPKI) (30333 bytes)
An Overview of BGPsec (23576 bytes)
An Out-Of-Band Setup Protocol For RPKI Production Services (42090 bytes)
Adverse Actions by a Certification Authority (CA) or Repository Manager in the Resource Public Key Infrastructure (RPKI) (65821 bytes)

Request for Comments:

A Profile for X.509 PKIX Resource Certificates (RFC 6487) (69150 bytes) updated by RFC 7318
A Profile for Resource Certificate Repository Structure (RFC 6481) (36117 bytes)
Certificate Policy (CP) for the Resource Public Key Infrastructure (RPKI) (RFC 6484) (77855 bytes)
A Profile for Route Origin Authorizations (ROAs) (RFC 6482) (15745 bytes)
An Infrastructure to Support Secure Internet Routing (RFC 6480) (62127 bytes)
A Protocol for Provisioning Resource Certificates (RFC 6492) (65896 bytes)
Manifests for the Resource Public Key Infrastructure (RPKI) (RFC 6486) (42913 bytes)
Validation of Route Origination Using the Resource Certificate Public Key Infrastructure (PKI) and Route Origin Authorizations (ROAs) (RFC 6483) (19811 bytes)
BGP Prefix Origin Validation (RFC 6811) (20082 bytes)
Resource Public Key Infrastructure (RPKI) Trust Anchor Locator (RFC 6490) (15004 bytes) obsoleted by RFC 7730
The Resource Public Key Infrastructure (RPKI) to Router Protocol (RFC 6810) (59714 bytes)
Use Cases and Interpretations of Resource Public Key Infrastructure (RPKI) Objects for Issuers and Relying Parties (RFC 6907) (66099 bytes)
The Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure (RPKI) (RFC 6485) (11377 bytes) obsoleted by RFC 7935
Certification Authority (CA) Key Rollover in the Resource Public Key Infrastructure (RPKI) (RFC 6489) (23060 bytes)
The Resource Public Key Infrastructure (RPKI) Ghostbusters Record (RFC 6493) (15491 bytes)
Signed Object Template for the Resource Public Key Infrastructure (RPKI) (RFC 6488) (25130 bytes)
Algorithm Agility Procedure for the Resource Public Key Infrastructure (RPKI) (RFC 6916) (48395 bytes)
Origin Validation Operation Based on the Resource Public Key Infrastructure (RPKI) (RFC 7115) (26033 bytes)
Threat Model for BGP Path Security (RFC 7132) (52539 bytes)
Security Requirements for BGP Path Validation (RFC 7353) (18148 bytes)
Resource Public Key Infrastructure (RPKI) Objects Issued by IANA (RFC 6491) (23662 bytes)
Definitions of Managed Objects for the Resource Public Key Infrastructure (RPKI) to Router Protocol (RFC 6945) (52515 bytes)
Resource Public Key Infrastructure (RPKI) Router Implementation Report (RFC 7128) (19348 bytes)
Template for a Certification Practice Statement (CPS) for the Resource PKI (RPKI) (RFC 7382) (82372 bytes)
Policy Qualifiers in Resource Public Key Infrastructure (RPKI) Certificates (RFC 7318) (8214 bytes) updates RFC6487
Resource Public Key Infrastructure (RPKI) Trust Anchor Locator (RFC 7730) (17672 bytes) obsoletes rfc6490
Securing Routing Policy Specification Language (RPSL) Objects with Resource Public Key Infrastructure (RPKI) Signatures (RFC 7909) (30493 bytes) updates RFC2622,RFC4012
The Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure (RFC 7935) (17952 bytes) obsoletes rfc6485

Charter (as of 2006-04-12):

The purpose of the SIDR working group is to reduce vulnerabilities in
the inter-domain routing system. The two vulnerabilities that will be
addressed are:

* Is an Autonomous System (AS) authorized to originate an IP prefix
* Is the AS-Path represented in the route the same as the path through
which the NLRI traveled

The SIDR working group will take practical deployability into consideration.

Building upon the already completed and implemented framework:

* Resource Public Key Infrastructure (RPKI)
* Distribution of RPKI data to routing devices and its use in
operational networks
* Document the use of certification objects within the secure
routing architecture

This working group will specify security enhancements for inter-domain
routing protocols.

Home - Tools Team - Datatracker - Web Site Usage Statistics - IASA - IAB - RFC Editor - IANA - IRTF - IETF Trust - ISOC - Store - Contact Us
Secretariat services provided by Association Management Solutions, LLC (AMS).
Please send problem reports to: ietf-action@ietf.org.