Re:How not to run a CA
by discreditable on Thursday March 01, 2018 @11:55AM
(#16493668)
If someone is hijacking BGP to MITM the world, how are the old methods any better?
[ Parent
| on HN ]
If you could hijack BGP you could just as easily inject routes to intercept DNS requests as well.
This is why ISPs use tools like RPKI validation of received routes, and things like the ARIN, RADB and RIPE route-servers.
Almost nobody uses RPKI: https://rpki-monitor.antd.nist.gov/