4 ms·
> Is it fair to say BGP in general relies on “good will” trust model? Yes. > I wonder if there exists an authoritative mechanism similar to browser punishing
by maltalex 9y ago
> Is it fair to say BGP in general relies on “good will” trust model?
Yes.
> I wonder if there exists an authoritative mechanism similar to browser punishing rouge or incompetent CA
Not really. Although if you get a reputation for being notoriously problematic, the "big boys" - the large networks who are the responsible adults in this game might deny you service or stop accepting your announcements.
> I supposed the integrity and the authentication is achieved by implementing and deploying RPKI
RPKI doesn't really solve the issue. It validates only the initial announcer, so BGP hijacks can still occur. It would however help reduce hijacks due to mistakes in configuration.