Re: 2 forwarded messages...DNSEXT discussion of Day and Kaminsky

I would have agreed with you until I looked at the logs for queries
for www.nytimes.com
The glue returned with the www.nytimes.com answer had much smaller ttl
than the original answers from the parents.  In this case ignoreing
the childs extra and unneccessary information would increase
performance.

I have no idea how widespread this might be and can only speculate on
what would possess them to do it.  Maybe some research is in order ?

On 2/17/09, Paul Jarc <[email protected]> wrote:
> David Nicol <[email protected]> wrote:
>> so, if any of these birthday attacks are possible at all, would it
>> make more sense, instead playing with the statistics with query
>> merging, to restrict the in-bailiwick stuff even further, to only pay
>> attention to the part of a reply that is directly the response to the
>> question that was asked?
>
> If you ignore glue records, you hurt performance, making dnscache
> return to parent servers more often.  If you don't ignore glue, you're
> still as vulnerable as before; ignoring only non-query-related,
> non-glue records won't help.
>
>
> paul
>