draft-wang-sidrops-bgpsec-transition

Transition to Full BGPsec Deployment: Transitive-BGPsec is Incompatible with BGPsec

groupnone stateactive pages7 rev01 expires2026-06-10 canonicalhttps://datatracker.ietf.org/doc/draft-wang-sidrops-bgpsec-transition/
This document elaborates on the reasons why it is unfeasible to reconstruct the native-BGPsec as a transitive approach, such that a BGP update with a correctly signed BGPsec_PATH attribute can traverse legacy areas and afterwards it can still be properly processed by subsequent native-BGPsec speakers.