6 ms·

And that agreement is trying to be enforced using PKI: https://blog.cloudflare.com/rpki/ https://blog.cloudflare.com/rpki/

• maltalex 8y ago
  RPKI doesn't stop BGP hijacks. Sure, it's better than nothing but RPKI doesn't validate the entire path, only the origin. If you want path validation, you need BGPSec. But BGPSec is basically un-deployable in real-world networks.
  • Avamander 8y ago
    Why is BGPSec un-deployable?