draft-wang-sidrops-bgpsec-transition
Transition to Full BGPsec Deployment: Transitive-BGPsec is Incompatible with BGPsec
This document elaborates on the reasons why it is unfeasible to
reconstruct the native-BGPsec as a transitive approach, such that a
BGP update with a correctly signed BGPsec_PATH attribute can traverse
legacy areas and afterwards it can still be properly processed by
subsequent native-BGPsec speakers.