IPv6 root DNS change

"Stuart D. Gathman" <[email protected]> Fri, 4 Jan 2008 10:00:52 -0500 (EST)
Newsgroups gmane.mail.spam.spf.devel
Message-ID <[email protected]>
Noted on slashdot:

  Just before year's end, ICANN/IANA sent out a short message saying that "on 4
  February 2008, IANA will add AAAA records for the IPv6 addresses of the four
  root servers whose operators have requested it."

There are some potential bugs in spf libraries that should be tested:

http://www.icann.org/committees/security/sac018.pdf

Especially those that use their own resolver, e.g. pyspf + pydns.  
Firewall appliances that look inside DNS packets are also suspect.
(And one pyspf user has already had trouble with a firewall that didn't
like DNS request packets with a TID of 0.)

-- 
	      Stuart D. Gathman <[email protected]>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/1007/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/1007/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=6959932&id_secret=81776694-af2796
Powered by Listbox: http://www.listbox.com