Fix To Chinese Internet Traffic Hijack Due In Jan. 92
alphadogg writes "Policymakers disagree about whether the recent Chinese hijacking of Internet traffic was malicious or accidental, but there's no question about the underlying cause of this incident: the lack of built-in security in the Internet's main routing protocol. Network engineers have been talking about this weakness in the Internet infrastructure for a decade. Now a fix is finally on the way."
Re:Not the problem, not the solution! (Score:3, Interesting)
Accepting a bad route from a peer and accepting a cryptographically signed bad route from a peer are the same thing.
Re:RPKI FTW (Score:3, Interesting)
More importantly, in the article it says the RIR's also finish their part so now we can start building filters which actually work ?
No, that's still a few years off.
The problem with RPKI is it's all well and good, until you realize there has to be a central authority, and that central authority is vulnerable to influence by governmental and corporate entities.
For example, federal agents sending patriot act security letters demanding to have the encryption keys, needed to forge resource assignments to themselves, or demanding RIRs "cancel such and such resource"
This could make the RIAA and MPAA very happy, as it could provide them an expeditious way of shutting down any network, with a much lighter burden than that required to get a court order.