Re: OPENPGPKEY RRTYPE review - Comments period ends Aug 6th

On 23 July 2014 at 23:10:21, Jay Daley ([email protected]) wrote:

> I see Joe has provided one reason (which doesn't appear to make sense to me since a large  
> RRType can't be 'hidden' lower down),

I was referring to the ongoing habit of choosing an apex QNAME and using QTYPE=ANY in a reflection attack; the more stuff you load into the apex owner name, the bigger the amplifier. From that perspective the more apex-related stuff you can shift to sub-layers, the worse the amplifier, the better the Internet.

> but my point is that there isn't a reason in the draft. 

... and that is a fair point.


Joe


_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext