4 ms·
RPKI doesn't stop BGP hijacks. Sure, it's better than nothing but RPKI doesn't validate the entire path, only the origin. If you want path validation, you nee
by maltalex 8y ago
RPKI doesn't stop BGP hijacks.
Sure, it's better than nothing but RPKI doesn't validate the entire path, only the origin.
If you want path validation, you need BGPSec. But BGPSec is basically un-deployable in real-world networks.
- Avamander 8y agoWhy is BGPSec un-deployable?