Re: 2 forwarded messages...DNSEXT discussion of Day and Kaminsky

On Wed, Feb 18, 2009 at 1:12 PM, Dean Anderson <[email protected]> wrote:
> Yes, I do know that qmerge doesn't make THAT change. My example was to
> demonstrate that changes affect the attacks that are possible.

That's a straw man.  No one suggested that changes never affect attack
success probabilities.

What I said, and continue to stand by, is that for any forgery attack
against djbdns 1.05 patched with Kevin Day's qmerge patch, there
exists another forgery attack against stock djbdns 1.05 with
comparable or better chance of success.  You refute this statement,
but have so far failed to give any arguments discrediting it.

Instead you wave your arms about ridiculous changes like disabling
dnscache's random number generator.