Re: DNS vulnerability: other relevant software

[Florian Weimer <fw () deneb enyo de>]

* Bernhard R. Link:

> if there are many queries, I think attacking only gets harder, because
> guessing the order of requests gets harder to predict, adding more
> variables.

Right.

> I'm also looking forward to this. I was under the impression that is was
> common knowledg that dns is simply insecure, everyone trusting on it is
> insane, and security issues meaning it is easier to hijack than it
> should be (like dns servers accepting answers for things they never
> asked for and things like that).

Online banking security mainly relies on the integrity of DNS and
routing.  (Bert's DNS forgery resilience draft actually covers this, and
I think he's right.)