Re: News of ISC Developing BIND Patch

[Iljitsch van Beijnum <iljitsch () muada com>]

On Wed, 17 Sep 2003, Simon Waters wrote:

> As such any root server operator can potentially hijack a significant
> amount (majority?) of Internet traffic, at least if no one notices
> something odd, and figures out what is going on too quickly. This is DNS
> security 101...

> A single rogue root server could be very messy to cleanup after if the
> person in control of the rogue server were skilled in the art (and root
> server operators are suppose to be so skilled to get the job).

Fortunately people will start noticing within minutes if not seconds. A
quick manual purge of the resolver cache should suffice for cleanup once
the problem itself has been fixed.