Re: 2 forwarded messages...DNSEXT discussion of Day and Kaminsky

Dean Anderson <[email protected]> wrote:
> On Fri, 20 Feb 2009, Matthew Dempsky wrote:
>> If you DOS the authority server and cause any of the responses to
>> be lost, then dnscache's corresponding query ports are vulnerable
>> to attack for a longer period of time.  You understand that if
>> unpatched dnscache sends 200 query packets for the same name, that
>> an attacker only has to successfully forge a response packet to one
>> of these queries for his attack to succeed, right?
>
> Wrong yet again: On an unpatched DNScache, it sends up to 200 queries in
> response to the birthday attack, and so it expects up to 200 responses.  

Right, but that doesn't conflict with what Matthew said.


paul