On Oct 15, 2014, at 7:29 AM, Iljitsch van Beijnum <[email protected]> wrote:
> However, rather than advertising that block in BGP as a single prefix, or 
> perhaps a handful of prefixes, like an ISP would, they subdivide this block 
> within the organization and then many subunits advertise subprefixes though 
> different ISPs. The aggregate may or may not be advertised.

Yuck.   Has anybody done an analysis of how this works with RPKI?   Seems like 
an obvious attack surface if the RPKI isn't present or isn't done right.

_______________________________________________
GROW mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/grow

Reply via email to