Re: djbdns/dnscache poisoning weakness

Jeff King <[email protected]>
Newsgroups gmane.network.djbdns
Message-ID <[email protected]> 
On Mon, Feb 09, 2009 at 09:25:30PM -0500, Dean Anderson wrote:

> Previous analysis of the Kevin Day/Dan Kaminsky proposed changes to
> DNSCACHE revealed that they would ADD EXTREME WEAKNESS not fix weakness,
> making it possible to poison a cache in about 1000 messages. I have not
> yet analyzed the BIND changes, and do not know if they suffer the same
> weaknesses as the DNSCACHE changes.

Please point us to that analysis, or repost it here.

-Peff
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.