nanog mailing list archives
Re: OT: Re: WANAL (Re: What could have been done differently?)
From: Paul Vixie <paul () vix com>
Date: Tue, 28 Jan 2003 18:57:54 +0000
What do you think of OpenBSD still installing BIND4 as part of the default base system and recommended as secure by the OpenBSD FAQ ? (See Section 6.8.3 in <http://www.openbsd.org/faq/faq6.html#DNS> )
i think that bind4 was relatively easy for them to do a format string audit on, and that bind9 was comparatively huge, and that their caution is justified based on bind4/bind8's record in CERT advisories, and that for feature level reasons they will move to bind9 as soon as they can complete a security audit on the code. (although in this case ISC and others have already completed such an audit, another pass never hurts.)
Current thread:
- Re: What could have been done differently?, (continued)
- Re: What could have been done differently? Leo Bicknell (Jan 28)
- RE: What could have been done differently? Eric Germann (Jan 28)
- Re: What could have been done differently? Jack Bates (Jan 28)
- RE: What could have been done differently? Eric Germann (Jan 28)
- Re: What could have been done differently? Scott Francis (Jan 28)
- Re: What could have been done differently? Valdis . Kletnieks (Jan 28)
- RE: What could have been done differently? Eric Germann (Jan 28)
- Re: What could have been done differently? Leo Bicknell (Jan 28)
- Re: What could have been done differently? Scott Francis (Jan 28)
- Re: What could have been done differently? Leo Bicknell (Jan 28)
- WANAL (Re: What could have been done differently?) Paul Vixie (Jan 28)
- OT: Re: WANAL (Re: What could have been done differently?) Rafi Sadowsky (Jan 28)
- Re: OT: Re: WANAL (Re: What could have been done differently?) Paul Vixie (Jan 28)
- Re: OT: Re: WANAL (Re: What could have been done differently?) Mike Lewinski (Jan 28)
- Re: OT: Re: WANAL (Re: What could have been done differently?) Scott Francis (Jan 28)
- RE: What could have been done differently? Vadim Antonov (Jan 28)
- Re: What could have been done differently? bdragon (Jan 29)
- Re: What could have been done differently? Mike Hogsett (Jan 29)
- Re: What could have been done differently? Scott Francis (Jan 28)