Re:Is BGP Safe Yet? No. Test Your ISP
by dsr_ on Wednesday April 01, 2026 @10:11AM
(#47601165)
If you can inject arbitrary malicious routes, you can make ACME requests for a new cert.
[ Parent
| on HN ]
Re:Is BGP Safe Yet? No. Test Your ISP
by ThomasGlanzmann on Wednesday April 01, 2026 @02:47PM
(#47604884)
You can mitigate this with DNSSEC, CAA records and account pinning. See: https://www.devever.net/~hl/xmpp-incident