Re: merge outgoing patch

On Mon, Mar 01, 2010 at 02:40:55PM -0600, Mark Johnson wrote:

> On Sat, Feb 27, 2010 at 2:19 AM, Jeff King <[email protected]> wrote:
> > Yes. It's still on my todo list, but nobody seemed all that
> > interested, and I had many other more important things to do, so it
> > has remained a pretty low priority. And while I stand by my earlier
> > analysis, I think for many sites (including mine), the problem is simply
> > a non-issue. I'm behind a slow enough link that I would notice a
> > concerted birthday poisoning attack, because it would kill my network
> > long before a successful poison. So even I am not running the patch.
> 
> Are you still running the patch to cache SOA records?

No, I am actually running stock djbdns. The lack of SOA caching just
makes guessing attacks a little bit simpler, but they still have the
bandwidth problem I mentioned above.

But bear in mind the only dnscache I administer these days sits behind a
NAT and serves a home network of three machines. I am somewhat out of
touch with the operational issues of a large-scale resolver.

-Peff