On Fri, May 17, 2024 at 4:20 PM Tom Beecher <beecher@beecher.cc> wrote:

RPKI is not a good solution for all networks, especially those that are non-transit in nature and take reasonable mitigation actions like IRR prefix lists.

Some of the largest , most impactful route leaks have come from non-transit networks reliant on IRR managed prefix lists.

Can you be more specific?

Was it malicious?

Who in the usa was impacted ?

Keep mind rpki only solves misorigination.

On Fri, May 17, 2024 at 5:21 PM Ca By <cb.list6@gmail.com> wrote:

On Fri, May 17, 2024 at 2:02 PM Sean Donelan <sean@donelan.com> wrote:

Sigh, industry hasn't solved spoofing and routing insecurity in two
decades. If it was easy, everyone would have fixed it by now.

Industry has been saying 'don't regulate us' for decades.

I hope the regulations are more outcome focused.

RPKI is not a good solution for all networks, especially those that are non-transit in nature and take reasonable mitigation actions like IRR prefix lists.