nanog mailing list archives

Re: Verisign Responds


From: Paul Vixie <vixie () vix com>
Date: 23 Sep 2003 23:33:22 +0000


It's still to be seen if ISC's cure is worse than the disease; as 
instead of detecting and stoping wildcard sets, it looks for delegation. 

that's because wildcard ("synthesized") responses do not look different
on the wire, and looking for a specific A RR that can be changed every day
or even loadbalanced through four /16's that may have real hosts in them
seems like the wrong way forward.
-- 
Paul Vixie


Current thread: