nanog mailing list archives

Re: "Is BGP safe yet?" test


From: Randy Bush <randy () psg com>
Date: Tue, 21 Apr 2020 03:46:04 -0700

Anyhow I think some people think about RPKI in a way too binary manner
'because it is not secure, it is not useful'. Yes, AS_PATH
authenticity is an open problem, but this doesn't mean RPKI is
useless. Most of our BGP outages are not malicious, RPKI helps a lot
there and RPKI creates a higher quality database for prefix origin
information than what we have had.

essentially agree.  my pedantic quibble is that i would like to
differentiate between the RPKI, which is a database, and ROV, which
uses it.

randy


Current thread: