Re: DNS hardening, was Re: Dan Kaminsky

[Roland Dobbins <rdobbins () arbor net>]

On Aug 6, 2009, at 1:12 AM, Douglas Otis wrote:

> Having major providers support the SCTP option will mitigate  
> disruptions caused by DNS DDoS attacks using less resources.

Can you elaborate on this (or are you referring to removing the  
spoofing vector?)?

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

        Unfortunately, inefficiency scales really well.

                   -- Kevin Lawton