North American Network Operators Group|
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical
RE: Winstar says there is no TCP/BGP vulnerability
On Tue, 20 Apr 2004, Michel Py wrote: > > Please forgive me if I'm naive and/or ask a stupid question, but is > there any reason (besides your platform not supporting it) _not_ to MD5 > your BGP sessions? Geez, on my _home_ router all my v4 BGP sessions are > MD5ed (v6 not there yet). > > Michel. there is the issue of changing the keys during operations without impacting the network, eh? Having to bounce every bgp session in your network can be pretty darned painful... if you change the key(s) of course. If you don't you might as well not have keys, since adding the 3 lines of C code required to Paul Watsons' program making it do the hashing certainly won't be a big deal, eh?