Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

2018-09-17 Thread Montgomery, Douglas (Fed)
Job, Thanks for the input, we have a new version of our RPKI monitor that we are in the process of moving from development systems to publicly accessible servers. The new monitor has significant additions in the areas of diagnostics, and highlights issues of interest such as path / customer con

Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

2018-09-18 Thread Montgomery, Douglas (Fed)
Michel, First, thanks for your continued support as a taxpayer. Second, in general our mission is limited to supporting the development and promulgation of consensus standards and the development of test / measurement methods and guidance to accelerate their adoption. In particular we are not

Re: A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-24 Thread Montgomery, Douglas (Fed)
a Highway to Hell but only a Stairway to Heaven says a lot about anticipated traffic volume. >-Original Message- >From: Montgomery, Douglas (Fed) [mailto:do...@nist.gov] >Sent: Sunday, 24 February, 2019 15:38 >To: nanog@nanog.org >Cc: kmedc...@dessu

Re: RPKI coverage statistics

2017-03-02 Thread Montgomery, Douglas (Fed)
>Date: Mon, 20 Feb 2017 05:52:17 + >From: Nagarjun Govindraj >To: "nanog@nanog.org" >Subject: RPKI coverage statistics >Message-ID: > >Content-Type: text/plain; charset=UTF-8 > >Hi All, > >where can I found the current coverage of IP prefixes under RPKI system. >Stats like total prefi

NCCoE Secure Inter-Domain Routing Project - request for industry input.

2017-05-31 Thread Montgomery, Douglas (Fed)
The National Cybersecurity Center of Excellence (NCCoE) requests community input on a proposed project entitled: Secure Inter-Domain Routing, Part 1: Route-Hijacks. https://nccoe.nist.gov/projects/building-blocks/secure-inter-domain-routing The objective of the project is to examine and demonst

Call for Participation: NIST Workshop on Security for IPv6 Enabled Enterprises - June 13, 2019 @ NCCoE

2019-05-24 Thread Montgomery, Douglas (Fed) via NANOG
NIST NCCoE will host a workshop on Security for IPv6 Enabled Enterprises.  The focus will be to identify and develop plans to address security challenges / barriers to full IPv6 deployment in enterprise settings.     Please see the call for participation below for more details and to register. h

Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

2018-09-24 Thread Montgomery, Douglas (Fed) via NANOG
Michel, The GoRTR services that cloudflare speaks of below might be an example of an organization positioned to offer the kind of services you suggest. https://blog.cloudflare.com/rpki-details/ dougm -- Doug Montgomery, Manager Internet & Scalable Systems Research @ NIST On 9/18/18, 4:46 P

Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

2019-02-15 Thread Montgomery, Douglas (Fed) via NANOG
Cc: rpki-monitor , "nanog@nanog.org" , "Montgomery, Douglas (Fed)" Subject: Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor? Message-ID: <2b8f9b07-27a7-08ba-ac51-afd39b30f...@riseup.net>

RE: A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-24 Thread Montgomery, Douglas (Fed) via NANOG
You might have missed reading the very article you cite. "Woodcock said PCH’s reliance on DNSSEC almost completely blocked that attack, but that it managed to snare email credentials for two employees who were traveling at the time. Aside from that, DNSSEC saved us from being really, thorou