BGP (Border Gateway Protocol)

[Infrasonic]

You can check your ISP here...https://isbgpsafeyet.com/

Discuused here around 1h 13m in...https://www.youtube.com/watch?v=m58TwuRpXR4

Resource Public Key Infrastructure & How BGP can break the Internet

[GrahamPlatt]

Fascinating that. Watched the whole episode. Eclectic topic selection, clearly explained by Steve Gibson. A few too many long hypes for their sponsors (use ExpressVPN myself though, & if I ever do go for cloud storage, it’s likely to be wasabi).
Thanks for posting that.

[Infrasonic]

If you hover your mouse pointer over the progress bar you can forward scrub the video to see where the 'word from our sponsor ' bits end on most YT videos.
uBlock Origin takes out the rest of the YT third party 'ad break' ones, which things like hosts file don't always succeed at.

That Wasabi deal did look pretty good though, I had a look at their site afterwards for 1TB/100% download with the comparator for the other majors...

[Infrasonic]

An interesting anomaly is if you use the BGP test facility via the Cloudflare Warp app you get a positive return, even if your ISP natively doesn't.
So my ISP 3 doesn't but in Android browsers (Chrome/Brave/FF Preview and Focus) I get routed through the app, same on my Chromebook in Android (but not on Chrome OS or Linux browsers).
Linux won't let you do the Chromium Chrome://flags DNS trick either (routing via 1.1.1.1), although there are other ways involving the command line.

[GrahamPlatt]

Can’t see the advantage of that, cloudflare effectively stopping the ISP reporting its true status. Or rather the cloudflare DNS system trying to protect the routing table servers. Anyone wanting to attack the router tables just wouldn’t approach via cloudflare. OTOH routing through cloudflare would prevent unintentional problems, and that’s the best they can do until universal implementation of RKPI. If I have understood things correctly.

[Infrasonic]

Don't know enough about it to have an informed opinion really and whether CF may be gilding the lily somewhat?
Vanilla ISP...

Your ISP (Three UK AS206067, AS206067) does not implement BGP safely. It should be using RPKI to protect the Internet from BGP hijacks. Tweet this →
Details
fetch https://valid.rpki.cloudflare.com
correctly accepted valid prefixes

fetch https://invalid.rpki.cloudflare.com
incorrectly accepted invalid prefixes

Through the Warp app...

You are using Cloudflare WARP, which implements BGP safely
Details
fetch
correctly accepted valid prefixes

fetch
correctly rejected invalid prefixes