BGP’s security problems are notorious. Attempts to fix that are a work in progress

This piece surveys the evolution of BGP security, noting significant progress in Route Origin Validation (ROV) adoption via RPKI (with ~56% of routes validated), while outlining the limitations and deployment challenges of BGPsec and the promise of ASPA for detecting route leaks without adding cryptographic load to BGP. It emphasizes the separation of RPKI from BGP, the trust hierarchy of resource certificates, and the operational, economic, and ossification hurdles that slow path validation. Overall, it concludes that while complete immunity is unattainable, the Internet’s routing core has become meaningfully more resilient than a decade ago.