Re: [routing-wg] RPKI vulnerable?

I'd certainly hope that it isn't that you can just spoof the valid origin AS...

I recently had someone come to me with this *shocking* discovery and ask about how to disclose it. This was the same person who alerted me to the also *shocking* discovery that longest-match wins, and so just twiddling local-pref doesn't save you.

the next one will be the shocking discovery that route origin validation is not meant to deter malicious attack. and rov will not fix world hunger either. folk need to get a grip. randy