Switzerland built an alternative to BGP. Nobody noticed • The Register
Switzerland built an alternative to BGP. Nobody noticed • The Register
https://www.theregister.com/2026/03/17/switzerland_bgp_alternative/
Publish Date: 2026-03-17 04:15:00
Source Domain: www.theregister.com
Feature BGP, the Border Gateway Protocol, was not designed to be secure. It was designed to work – to route packets between the thousands of autonomous systems that make up the internet, quickly and at scale.
For four decades, it has done exactly that. It has also, throughout those four decades, been exploited, misconfigured, and abused in ways that were predictable from the start. Route hijacks reroute traffic through hostile networks. Route leaks knock services offline. Nation-state cyber crews weaponize BGP to intercept communications at scale. These are not theoretical threats. They are documented, recurring events, and they remain possible today for one simple reason: BGP has no native way to verify that a network claiming to own a block of addresses actually does.
Log files that describe the history of the internet are disappearing. A new project hopes to save them
READ MORE
A series of patches and extensions like Resource Public Key Infrastructure (RPKI), BGPsec, and RPKI-based Route Origin Authorization (ROA) have been layered over the original protocol in an attempt to address the worst of these vulnerabilities. They help at the margins. They do not solve the underlying problem.
There is, however, a system that does, or at least claims to. SCION, which stands for Scalability, Control, and Isolation On Next-Generation Networks, is an internet routing architecture developed at ETH Zürich. Unlike the patches applied to BGP, SCION does not attempt to retrofit security onto a 40-year-old foundation. It replaces the foundation entirely. That redesign is the life’s work of Adrian Perrig, professor of computer science at ETH Zürich and the principal architect of SCION.
The boat full of holes
Perrig has been worrying about internet security since 1991, when he first worked with Cisco routers before starting his bachelor’s degree at EPFL. He has spent most of the intervening years trying to make the internet more secure. Eventually, he concluded it was the…
