ASPA at APNIC: Strengthening BGP path validation
With support now available in MyAPNIC and the Registry API, APNIC Members can publish ASPAs to help detect route leaks and strengthen the integrity of Internet routing.
Tag: security
ROA adoption barriers to practical planning tools: Reflections from ARIN 57
Guest Post: Even operators with strong BGP knowledge tend to create ROAs infrequently and may lack deep familiarity with their behaviour. ROOTBEER helps operators understand what to consider when creating ROAs.
RFC 9958 and the operational reality of PQC
RFC 9958 shifts Post-Quantum Cryptography from theory into operational reality, highlighting how larger payloads, new handshake models, and hybrid deployments will affect real networks. What does this mean for engineers and operators?
SSH key exchange failures when managing legacy network devices
Guest Post: How to restore access to legacy network devices when modern SSH clients reject outdated cryptography.
Rising CVEs in the AI epoch
Vulnerability disclosures are rising sharply, but that does not mean risk is increasing. As AI-driven discovery floods defenders with more data but not more threats, success now depends on identifying what matters and acting faster.
Strengthening APNIC’s security foundations
APNIC is strengthening the security of its core systems through infrastructure modernization, enhanced application testing, and improved data practices.
Notes from NANOG 97
AI eats the world, geolocation, measuring IPv6, and the cost of SSH from NANOG 97.
Your elected leaders: Terry Sweetser, Routing Security SIG Chair
The Internet is built by communities, not just networks. As Routing Security SIG Chair, Terry is focused on strengthening that effort — from advancing RPKI adoption to supporting the next generation of operators.
Rethinking vulnerability management in the age of AI and CI/CD
Guest Post: AI-driven development is accelerating how software changes and how vulnerabilities are fixed. Traditional models like CVE and CVSS are struggling to keep pace.
Don’t throw the (cryptographic) baby out with the bathwater
Even if Shor’s Algorithm is now implementable inside ten years, symmetric keying should still be trustworthy if we fix RSA with PQC methods. Don’t throw the baby out with the bathwater!