emot

hard to say who’s to blame: stores, installers or the vendor. most of these dashboards sat online for months, only 195 of 1,331 had every fix, and 76% went offline within days of the attack (disconnecting was possible all along, it seems).

Agreed, the post has a section on it: networks publishing ASPA records went from 131 to 3,272 in a year, mostly as each registry shipped signing tools. Still early, though. So far published records can verify about 3.5% of observed routing.