Other Techniques

• Signed Origins (in-band)

  • origin AS signs announcement of prefix
  • receivers may validate against public keys
  • can cache public keys

• Signed Paths (in-band)

• Note that in-band has no verification against redundant data

• Origin validation helps against malicious attacks, but doesn't help against route leaks

Previous slide

Next slide

Back to first slide

View graphic version