5 ms·
RPKI would allow signing of BGP routes so that networks could reject them if they were not signed by the owners. Cloudflare has been pushing it heavily to avoid
by tomschlick 7y ago
RPKI would allow signing of BGP routes so that networks could reject them if they were not signed by the owners. Cloudflare has been pushing it heavily to avoid this kind of crap.
https://blog.cloudflare.com/rpki/ https://blog.cloudflare.com/rpki/
- mirimir 7y agoThere's a sibling subthread which says that RPKI wouldn't be enough.[0] Me, I have no clue. And ELI5, what does S-BGP do differently? 0) https://news.ycombinator.com/item?id=20980296 https://news.ycombinator.com/item?id=20980296
- indemnity 7y agoTelia is implementing RPKI too: https://www.teliacarrier.com/Press-room/Press-releases/Telia-Carrier-Takes-Major-Step-to-Improve-the-Integrity-of-the-Internet-Core-.html https://www.teliacarrier.com/Press-room/Press-releases/Telia...