Re: 2 forwarded messages...DNSEXT discussion of Day and Kaminsky

Dean Anderson <[email protected]> wrote:
> - If one agrees that reducing the number of ports consumed might affect
> the entropy of the port number

You keep saying this, but you never explain it.  I'm trying to figure
out what you mean, but I haven't had any success so far.  Analogies
with popcorn poppers aren't very illuminating.  Please provide
complete, technical detail.

The change suggested by Kevin Day, and implemented by Jeff King, and
having nothing whatsoever to do with Dan Kaminsky as far as I can
tell, does not reuse the same port for multiple outgoing queries.  It
only causes fewer outgoing queries to be sent while dnscache is under
a birthday attack.  When it isn't under such an attack, the behavior
is unchanged.  And in any case, when outgoing queries are sent, the
port numbers are chosen the same way as before.  What's the problem?


paul