3 ms·
> BGP hijacking is still possible today. .. in the same sense as http hijacking is possible today, i.e. without httpS. For BGP we have RPKI ROA for a quite a w
by betaby 4y ago
> BGP hijacking is still possible today.
.. in the same sense as http hijacking is possible today, i.e. without httpS. For BGP we have RPKI ROA for a quite a while, and ASPA is coming.
- kortilla 4y agoRPKI ROA is trivially by-passable with a path modification attack. It only helps stopping hijackings of really well connected networks. And sadly it’s still not required. > and ASPA is coming Yeah, but it’s not here and requires verification at each AS append, which means we’re a good 5 years before it’s really enforceable on arbitrary prefixes across transit networks.