Re: Re: IPv6 root DNS change

On Fri, 4 Jan 2008, Julian Mehnle wrote:

> > http://www.icann.org/committees/security/sac018.pdf
> 
> Can you be more specific about what sort of bugs might occur?

The above PDF is specific.  But a few highlights:

1. The new root DNS packets will be 811 bytes (13 A, 13 AAAA records), UDP
only.  This requires EDNS0 support.

2. Security software might block DNS records with unknown record types,
and might not know about AAAA.

A thought: Issue 1 says to me that SPF DNS packets ought to be allowed to be as
big as DNS root packets.  So the minimum SPF packet size should be increased to
811 from 512.


-- 
	      Stuart D. Gathman <[email protected]>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flammis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.

-------------------------------------------
Sender Policy Framework: http://www.openspf.org
Archives: http://v2.listbox.com/member/archive/1007/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/1007/
Modify Your Subscription: http://v2.listbox.com/member/?member_id=6959932&id_secret=81822365-2febd3
Powered by Listbox: http://www.listbox.com