funsec mailing list archives

Re: "The ISC is the Microsoft of the DNS, BIND its Windows, ..."


From: Paul Ferguson <fergdawgster () gmail com>
Date: Fri, 6 Aug 2010 13:38:59 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, Aug 6, 2010 at 12:53 PM,  <Valdis.Kletnieks () vt edu> wrote:

On Fri, 06 Aug 2010 15:30:10 EDT, Jeffrey Walton said:
request. Under this scheme, the distributed, fault tolerant nature of
DNS will be nullified. That is, a government only needs to poison the
database of one cooperating operator, and other cooperating dns
operators will dutifully incorporate the changes. To make matters
worse, the poisoning will cross national/political boundaries -
something governments don't fully enjoy under the current system.


...or technically understand.

Oddly enough, BGP has exactly the same problem.


*bing*  :-)

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFMXHLdq1pz9mNUZTMRAm7KAKDymqrSVkRRKNK4tC4f68Z8gS+yIwCeOjZG
5uWpJNTCskmYxCD3fP2Asas=
=xZ2k
-----END PGP SIGNATURE-----

-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: