Re: glibc resolver weakness

[bet () RAHUL NET (Bennett Todd)]

For those sufficiently paranoid to worry about such things, one
solution (I believe, if I'm not misunderstanding the nature of the
threat) is to run a well-written, efficient, secure caching
nameserver on each and every local system, putting 127.0.0.1 in
/etc/resolv.conf.

One great caching nameserver is djb's dnscache, at
<URL:http://cr.yp.to/dnscache.html>.

-Bennett

<HR NOSHADE>
<UL>
<LI>application/pgp-signature attachment: stored
</UL>