Hacker News Reader

BCP38/Anti-Spoofing is a really really hard problem to fix. It may not happen in our lifetimes. There is the MANRS document/routing manifesto, which has been gaining traction. https://www.routingmanifesto.org/

There are other initiatives as well. But the problem is very difficult to solve.

View on HN

Do you mean the problem is technically hard or politically hard? From my understanding, it's not too difficult for an ISP to implement, the problem is convincing ISPs to implement it (when many don't care).

The problem is technically difficult to solve. The same way deploying IPv6 was.

It's also worse, because if you were to deploy BCP38, you don't really get a whole lot from it. Sure, it's a good thing to do, but at the end of the day people aren't going to pick your service because you have BCP38 setup properly.

Pretty sure 99% consumers don't give a shit if their ISPs support end to end IPv6 too.

No, quite the opposite. Nearly every router has a very simple option to not allow packets from IPs not on the same CIDR as the interface. If ISPs turned this on on each edge interface, the problem would be solved.

It's entirely political/economic. There is no incentive for an ISP to do so because it provides no direct benefit. It's a classic issue of externalities.

Reply on news.ycombinator.com