Re: djbdns/dnscache poisoning weakness
Jeremy Kister <[email protected]>
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
On 2/9/2009 2:41 PM, Kevin Day wrote: > Specifically, two patches were developed by Jeff King ([email protected]) > that close the poisoning attack weaknesses discussed here. The first [...] > The patches are available individually or as a pre-patched djbdns > distribution at http://www.your.org/dnscache Hey Jeff, Do you recommend deploying these two patches in production environments that serve a few million rather-untrusted hosts? Do we have any measurement/estimate of CPU overhead that qmerge takes ? Do we have an average percent cache is spent on the SOAs ? -- Jeremy Kister http://jeremy.kister.net./