Re: how to protect name servers against cache corruption

[randy () psg com (Randy Bush)]

> this statement bothers me.  certainly without DNSSEC there can be no 
> *assurances* of security,

While there are often assurances of security, there can never be assurance
of security.

> there is a gaping chasm between the current system and DNSSEC that could
> be closed significantly with proper design.
>
> simply stating that until DNSSEC arrives these attacks are going to be 
> allowed is a copout.

Send code.

randy