4 ms·
Without me having to deep dive through several RFCs... Is it a secure protocol, or is this BGP style we trusted everyone in the beginning and now have to layer
by tehbeard 5y ago
Without me having to deep dive through several RFCs... Is it a secure protocol, or is this BGP style we trusted everyone in the beginning and now have to layer security atop it?
- aaronmdjones 5y agoYou can sign update transactions with HMAC-SHA2. I don't believe there's anything in the way of preventing replays though.
- throw0101a 5y agoPer a sibling comment, GSS has timestamps to prevent replays: * https://en.wikipedia.org/wiki/TSIG https://en.wikipedia.org/wiki/TSIG
- yrro 5y agoIt can be secured with GSSAPI.