RE: Securing the BGP or controlling it?

["Thomas Magill" <tmagill () providecommerce com>]

All of the major providers I have worked with have required proof of 'ownership' of address space or an LoA from the 
registered holder of that space before they would allow advertisements from me, which are then filtered.  Is this not 
the norm?  I can understand if they are talking about an operator making a mistake, but the article seems to imply that 
anyone running BGP can bring down the Internet...  I think any competent provider can easily eliminate this threat from 
customers.  Are there any types of penalties if an ISP is found to not be taking adequate precautions, other than the 
possible threat of losing business?

-----Original Message-----
From: Franck Martin [mailto:franck () genius com] 
Sent: Monday, May 10, 2010 9:48 AM
To: nanog () nanog org
Subject: Re: Securing the BGP or controlling it?

APNIC allows you to put your BGP data in the whois, so like this you have a third party verification tool on who is 
peering with who.