3 ms·
RKPI/ROA uptake is now at 50% which is pretty significant increase in just 2 years. https://radar.cloudflare.com/routing https://radar.cloudflare.com/routing
by delfinom 2y ago
RKPI/ROA uptake is now at 50% which is pretty significant increase in just 2 years.
https://radar.cloudflare.com/routing https://radar.cloudflare.com/routing
Unfortunately BGP will probably be mostly solid in a few more years. At least solid enough among countries with caring ISPs. Prime for the AGI pickings.
- iscoelho 2y agoRPKI/ROA does not solve BGP hijacking [1]: "Even with RPKI validation enforced, a BGP actor could still impersonate your origin AS and advertise your BGP route through a malicious router configuration." It also would not have prevented the bulk of this issue (as the next AS Path was "1031 262504 267613 13335", and would have been accepted by RPKI) so I am confused why Cloudflare claims it to be the solution. Perhaps Cloudflare's own engineers forgot that RPKI is still insecure? [1] https://blog.cloudflare.com/rpki-details https://blog.cloudflare.com/rpki-details