Re: New addresses for b.root-servers.net

[William Herrin <bill () herrin us>]

On Sat, Jun 3, 2023 at 12:46 PM Matt Corallo <nanog () as397444 net> wrote:
> I assume RHEL would ship a root hints update during that time, but such things can slip through
> pretty easily as its not a security update.

Hi Matt,

It *is* a security update. That's a really great point that I
completely missed. After some period of time, the folks running
b.root-servers.net should file a CVE against implementations still
using the deprecated IP address. The CVE makes it a security issue
compelling vendors of any still-supported software to issue an update.

Regards,
Bill Herrin

-- 
William Herrin
bill () herrin us
https://bill.herrin.us/