Beyond Origin Validation: Four Classes of Routing Attack Nobody Is Validating

RPKI has made real progress against prefix hijacking. But when you map every known class of BGP attack against the defences that exist, four of them turn out to sit entirely outside cryptographic validation: handled with local filters, static thresholds and reactive response.