Re: New hijacking - Done via via good old-fashioned Identity Theft

[Ben McGinnes <ben () adversary org>]

On 7/10/10 6:28 AM, Eric Brunner-Williams wrote:
> On 10/6/10 10:34 AM, Owen DeLong wrote:
> > Number resources are not and should not be associated with domain
> > resources at the policy level. This would make absolutely no sense
> > whatsoever.
>
> hmm. ... "are not" ... so the event complained of ... didn't happen?

The key issue here is more the "should not" aspect, which I agree with,
but that these records are frequently used by netops to verify a
request.  There really needs to be a greater standardised level of due
diligence regarding advertisement requests that checks more than whether
a request is coming from a seemingly legitimate email address.


Regards,
Ben

Attachment: signature.asc
Description: OpenPGP digital signature