[cabf_validation] BGP hijacking protections

[Ben Wilson]

All,
Do we need to somehow add something in the BRs to better protect
subscribers against BGP hijacking?  See
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/lxiA7zcKLws/m/-1imDKu4AQAJ
and https://www.coinbase.com/blog/celer-bridge-incident-analysis. Is there
something that CAs and subscribers can arrange ahead of time to prevent
this kind of attack from succeeding? Could the CA/Browser Forum adopt
something in the BRs that would be of benefit?
Thanks,
Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/validation/attachments/20221013/29ab4c92/attachment.html>