3 ms·

If someone is hijacking BGP to MITM the world, how are the old methods any better?

• snuxoll 9y ago
  If you could hijack BGP you could just as easily inject routes to intercept DNS requests as well.
  • walrus01 9y ago
    This is why ISPs use tools like RPKI validation of received routes, and things like the ARIN, RADB and RIPE route-servers.
    • icedchai 9y ago
      Almost nobody uses RPKI: https://rpki-monitor.antd.nist.gov/ https://rpki-monitor.antd.nist.gov/