Border Gateway Protocol Security (BGPsec)¶

BGPsec extends BGP with cryptographic path validation: each autonomous system in the path signs its announcement, making route forgery detectable by receivers. Every signature it adds is also a new thing to get wrong. Key management, uneven deployment, and the long gap between partial and full adoption each open conditions where the security gain is asymmetric, reversible, or absent in practice. The machinery doing the checking is software and short files fetched on a schedule, the origin validation running beside it answers a different question on a different clock, and a key made weak on the day it was generated signs correctly for as long as it lives.