Follow

So Cloudflare created a website to put pressure on ISPs to adopt RPKI, which is called isbgpsafeyet.com.

In general, I like this idea, but they just implemented it half the way.
In my case: I use two ISPs, one for IPv4 without RPKI and one for IPv6 with RPKI. Now they tell me that the provider for IPv6 doesn't have RPKI implemented. This happens because Cloudflare did not implement separated checks for IPv4 and IPv6

Also, some ISPs already implemented RPKI for IPv6 but struggle to switch it on for IPv4 since they don't want to break there service for there customers. Especially in the time of a crisis.

Show thread

I left them a comment on there blog post about this topic, where I'm way nicer than in this ranty-thread. The blog post can be found here blog.cloudflare.com/is-bgp-saf
My comment still waits for improvement from there moderation team.

Show thread
Sign in to participate in the conversation
mastodon.earth

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!