Internet2 Network Security SIG

> 
> What's the opinion of having the DDoS vendor advertise the prefix using the 
> original networks ASN, in which case, the original ROA would cover?  Is 
> that bad form in terms of routing? 
> 

I’m not sure that fixes anything. The DDoS vendor will need to advertise a 
more specific, so you’re now stuck with creating many ROAs, or select an 
optional prefix length to cover the more specifics. Either will allow a 
hijacker to use spoof your origin and advertise more specific to effective 
divert traffic, all the while passing a validator test.

Attachment: smime.p7s
Description: S/MIME cryptographic signature