nanog mailing list archives

Verisign Countermeasures - BIND and djbdns patches

From: Adam Langley <agl () imperialviolet org>
Date: Tue, 16 Sep 2003 16:04:07 +0100


On Tue, Sep 16, 2003 at 04:03:08PM +0100, Adam Langley wrote:
I'm collecting countermeasures to the verisign wildcard DNS records
at http://www.imperialviolet.org/dnsfix.html. Currently there are
patches for BIND 9.2.2 and djbdns (not authored by myself) and a
Linux userland/netfilter program that rewrites DNS packets (which is).

If anyone has other patches/countermeasures I'm happy to maintain a list
of links at the above URL.

-- 
Adam Langley                                      agl () imperialviolet org
http://www.imperialviolet.org                       (+44) (0)7906 332512
PGP: 9113   256A   CC0F   71A6   4C84   5087   CDA5   52DF   2CB6   3D60

Current thread:

Verisign Countermeasures - BIND and djbdns patches Adam Langley (Sep 16)
- Re: Verisign Countermeasures - BIND and djbdns patches Christopher X. Candreva (Sep 16)
- Re: Verisign Countermeasures - BIND and djbdns patches bert hubert (Sep 16)