4 ms·
I am not a fan of RPKI since it's centralized. I guess better than nothing, but what I find annoying is that IP protocol has the ability for source routing. So
by anfilt 7y ago
I am not a fan of RPKI since it's centralized. I guess better than nothing, but what I find annoying is that IP protocol has the ability for source routing. So instead blinding trusting routes in BGP, clients/nodes who knows the route could avoid BGP entirely. It also allows the internet to be more resistant to censorship. Yet network operators seem to hate the idea of source routing because someone can spoof an ip address. So they just disable it so they don't have deal with it. Also smaller network operators seem to disable it as well to make firewall rules simpler
IPv6 implements source routing too, but again is hardly used. However it does include an other standard that also works like source routing for mobile networks, but is no where as powerful.