Re: "Is BGP safe yet?" test

[Sander Steffann <sander () steffann nl>]

Hi,

> Removing a resource from the certificate to achieve the goal you describe will make the route announcement NotFound, 
> which means it will be accepted. Evil RIR would have to replace an existing ROA with one that explicitly makes a 
> route invalid, i.e. issue an AS0 ROA for specific member prefix. This seems like a pretty convoluted way to try and 
> take a network offline.

I've seen worse…
Sander

Attachment: signature.asc
Description: Message signed with OpenPGP