[j-nsp] About Secure Transport for RPKI on JUNOS

Jared Mauch jared at puck.nether.net
Wed Dec 26 09:43:57 EST 2018



> On Dec 26, 2018, at 8:48 AM, Melchior Aelmans <melchior at aelmans.eu> wrote:
> 
> Personally I would say we need TCP-AO, not only for securing RTR but also to replace MD5 in several protocols....

Yes, this would be a positive step.  It will also take ~5-7 years for those on md5 to rotate to something else, but as I can’t configure it now on either Cisco/Juniper it’s a barrier to get to code that supports it, then a partner who can as well.

- Jared


More information about the juniper-nsp mailing list