Re: [Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers

[Mike Bell <mike () mikebell org>]

On Tue, Mar 11, 2003 at 08:30:17AM -0800, Mike Schiffman wrote:
> 12) It is a bit misleading to say djbdns has no security 
> vulnerabilities.  While it is true that the component programs that 
> make up djbdns have not had a known vulnerability, the design of djbdns 
> relies on external services (Bernstein recommends rsync over ssh, I 
> believe) to replicate data from the primary to secondaries.

By that logic a bug in vi is a bug in BIND, because you need an editor
to maintain zone files.

DJB may recommend rsync over ssh, but djbdns as distributed by DJB only
offers that as one potential way to get data from one computer to another,
you can use any means you see fit to do so.