https://nalar.dev/tags/bgpsec/ Recent content in BGPsec on Nalar Hugo en-us Wed, 23 Sep 2026 00:00:00 +0000 https://nalar.dev/bgpsec-signs-the-as-path-hop-by-hop/ Wed, 23 Sep 2026 00:00:00 +0000 https://nalar.dev/bgpsec-signs-the-as-path-hop-by-hop/ <p>BGP route origin authorization protects one narrow statement: which AS may originate a prefix. It does not cryptographically protect every AS hop that appears after the origin. BGPsec, standardized in RFC 8205, addresses that separate boundary by carrying signed path information in BGP UPDATE messages.</p> <p>The mechanism changes more than the validation rule. A BGPsec UPDATE uses <code>BGPsec_PATH</code> instead of the conventional <code>AS_PATH</code>, and participating ASes extend a chain of Secure_Path and Signature Segments as the route moves between BGPsec-capable external peers.</p>