nanog mailing list archives

Re: .gov DNSSEC operational message


From: Tony Finch <dot () dotat at>
Date: Thu, 30 Dec 2010 20:11:19 +0000

On 29 Dec 2010, at 16:56, bmanning () vacation karoshi com wrote:

   presuposes the attack was server directed.  the DNS-sniper will take
   out your locally configured root KSK &/or replace it w/ their own.

If they can do that then you have MUCH bigger problems than authenticity of DNS replies.

Tony.
--
f.anthony.n.finch  <dot () dotat at>  http://dotat.at/

Current thread: