Definitively, authors will try to draft something for that, but specific text suggestions to the list are always very welcome ! (actually … please do so)
At the moment I can think in the line:
“Direct peers allowing the hijack thru their networks will be warned the first time, but may be considered by the experts evaluation to be a party involved in case of subsequent deliberated hijacks cases”
Regards,
Jordi
El 20/3/19 14:58, "anti-abuse-wg en nombre de Andrey Korolyov" <anti-abuse-wg-bounces@ripe.net en nombre de andrey@xdel.ru> escribió:
On Wed, Mar 20, 2019 at 4:36 PM Ricardo Patara <ricpatara@gmail.com> wrote:
On this line of one ISP trying to make damage to other.
One might abuse a vulnerable router (thousand out there), create a tunnel to it
and announce hijacked blocks originated from victims ASN.
Both, victim ASN and vulnerable router owner, would be damaged and no traces of
criminal.
How could they defend themselves to the so called group of experts?
And things in this line had happened already.
Regards,
That's exactly my point from above for distributing responsibility over things that AS may do over its direct peers :) With example from Furio all ASNs in proposed topology could be blamed at once, for example. Determining exact topology may be somewhat not trivial, but not as hard as paper relations where both sides are claiming their innocence. So, for this version of proposal, I rather NAK it because it brings more potential mess than the usefulness against bad actors.