Hacker News new | ask | show | jobs
by devicenull 2946 days ago
RPKI, but it's barely used
2 comments

This is currently used to sign ROA. A rogue actor can easily work around that by including the original AS in the AS path of the announce.
Nope, that does not cover certificate issuance for IP addresses in that range.