>>> Loose mode would drop failing routes, iff there is covering (i.e. less >>> specific is ok) route already in RIB. >> isn't that exactly the hole punching attack? > No, as the the more specific route is signed and is preferred (longest > match routing) against the less specific hijacked route
clearly i am missing something. got a write-up? randy