Re: 2 forwarded messages...DNSEXT discussion of Day and Kaminsky

David Nicol <[email protected]> wrote:
> so, if any of these birthday attacks are possible at all, would it
> make more sense, instead playing with the statistics with query
> merging, to restrict the in-bailiwick stuff even further, to only pay
> attention to the part of a reply that is directly the response to the
> question that was asked?

If you ignore glue records, you hurt performance, making dnscache
return to parent servers more often.  If you don't ignore glue, you're
still as vulnerable as before; ignoring only non-query-related,
non-glue records won't help.


paul