1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Attackers could use Internet route hijacking to get fraudulent HTTPS certificates

Discussion in 'Network World' started by RSS, Aug 6, 2015.

  1. RSS

    RSS New Member Member

    Inherent insecurity in the routing protocol that links networks on the Internet poses a direct threat to the infrastructure that secures communications between users and websites.

    The Border Gateway Protocol (BGP), which is used by computer network operators to exchange information about which Internet Protocol (IP) addresses they own and how they should be routed, was designed at a time when the Internet was small and operators trusted each other implicitly, without any form of validation.

    If one operator, or autonomous system (AS), advertises routes for a block of IP addresses that it doesn’t own and its upstream provider passes on the information to others, the traffic intended for those addresses might get sent to the rogue operator.

    To read this article in full or to leave a comment, please click here

    Continue reading...

Share This Page