Home page logo

nanog logo nanog mailing list archives

Re: AW: Odd policy question.
From: "David W. Hankins" <David_Hankins () isc org>
Date: Fri, 13 Jan 2006 14:33:12 -0800

On Fri, Jan 13, 2006 at 12:09:51PM -1000, Randy Bush wrote:
Well, RFC2010 section 2.12 hints at cache pollution attacks, and that's
been discussed already.  Note that I can't seem to find the same claim
in RFC2870, which obsoletes 2010 (and the direction against recursive
service is still there).

despite others saying that 2870 should apply to servers other
than root servers, i do not support that.  and that leaves
aside that some root servers do not follow it very well.

I have to agree, with the exclusion that some people, having specific
requirements that are somewhat similar to root service requirements,
find 2870 and 2010 advice useful.

My intent here was to point out that all documented reasoning for this
practice is unfulfilling.

I'm curious if the rest of my response was lost on you due to its

David W. Hankins                "If you don't do it right the first time,
Software Engineer                       you'll just have to do it again."
Internet Systems Consortium, Inc.               -- Jack T. Hankins

Attachment: _bin

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]