nanog mailing list archives
Re: Why *can* cached DNS replies be overwritten?
From: Tony Finch <dot () dotat at>
Date: Mon, 11 Aug 2008 16:58:45 +0100
On Mon, 11 Aug 2008, Jay R. Ashworth wrote:
Everyone seems to continue asking "why can poisoning overwrite already cached answer" and no one seems to be answering, and, unless I'm a moron (which is not impossible), that's the crux of this issue.
Add me to the list of baffled observers. As far as I can tell this vulnerability to poisoning is mostly forbidden by the trustworthiness ranking in RFC 2181. Tony. -- f.anthony.n.finch <dot () dotat at> http://dotat.at/ VIKING NORTH UTSIRE: SOUTHWEST 5 TO 7 BACKING SOUTHEAST 4 OR 5. ROUGH OR VERY ROUGH, DECREASING MODERATE LATER. RAIN THEN SHOWERS. MODERATE OR POOR BECOMING GOOD.
Current thread:
- Why *can* cached DNS replies be overwritten? Jay R. Ashworth (Aug 11)
- Re: Why *can* cached DNS replies be overwritten? Tony Finch (Aug 11)
- Re: Why *can* cached DNS replies be overwritten? Leo Bicknell (Aug 11)
- Re: Why *can* cached DNS replies be overwritten? Jay R. Ashworth (Aug 11)
- Re: Why *can* cached DNS replies be overwritten? Jack Bates (Aug 11)
- Re: Why *can* cached DNS replies be overwritten? Edward Lewis (Aug 11)