News for hackers. Stuff that matters.

A comment on Tech CEO Sentenced to 5 Years in IP Address Scheme. Parent comment

Re:Tech CEO Sentenced to 5 Years in IP Address Scheme by tialaramex on Tuesday October 17, 2023 @02:25PM (#37919392)
Of course if the transit providers did a better job (to be fair you're talking about years ago when this wasn't close to practical) they'd reject the announcements as bogus, no need for administrative punishment if it just doesn't work so nobody tries it.

Today RPKI means that machines can in effect authenticate the LOA, the same way your web server is able to prove it's itchyouch.example (or whatever) to a web browser, the real owners of 203.0.113.0/24 can prove to a machine they're the real deal and you aren't. Unfortunately there are still transit providers who don't do that, or have it set just to bring the discrepancy to the attention of a human.

[ Parent | on HN ]
Re:Tech CEO Sentenced to 5 Years in IP Address Scheme by icedchai on Tuesday October 17, 2023 @03:28PM (#37920347)
Last I checked, RPKI was still not in use for the majority of prefixes: https://rpki-monitor.antd.nist.gov/ROV

This is likely true for much of the legacy space in the US, since ARIN requires you sign their registry agreement and actually pay fees to enable RPKI. It's not grandfathered.

[ Parent | on HN ]