> The problem is no one will actually blacklist a big ASN because its not
> in the individual best interest, which scales greatly with size. RPKI
> is pretty much the only real fix for this if the chain until the major
> carrier refuses to delist, and RPKI has it's own issues.
> 
> -Blake

Sadly, you're right. But my guess is that such a blacklisting would have to be 
done for only a very short period of time and once it is done once or twice, it 
would never need to be done again.  But it probably is too big a hammer.

Until there is some sort of registry that is the source of truth and is easy to 
use (distributed?), we're going to keep repeating this process.  

Reply via email to