Re: MWEB legal department - call for assistance

Quoting from Alan Leven:
"The problem comes in that their authoritative servers also populate
their recursive servers"

I don't see what CO.ZA can do except by providing education about how to
do DNS properly. A good ISP will have separate Authoritative and
Recursive Nameservers. The Recursive Nameservers SHOULD NOT have zones
from the Authoritative servers loaded into them. Been preaching that for
quite a few years now.

This breaks DNSSEC - you can not ask a recursive server to chase down
signatures of a zone that it is authoritative for.

It is also the cause of the damage inflicted on Alan. If I as an ISP
with lots of eyeballs, start to register "significantname.co.za" on my
system, which builds the DNS for a zone called "significantname.co.za"
and this is then made visible to all my eyeball customers, all eyeball
customers will be fed that new information.

The two types of Nameservers should be kept completely separate. A
Recursive server must find an answer to a query by chasing the answer
down from the root. (And of course cache it for the designated time..)

Oh... CO.ZA (the ZACR) does provide FREE training, the next (September)
courses are open for Registration....
http://dnstraining.coza.net.za/

The Intro Course in Cape Town is at Vanilla...  (Irony?)
The Advanced course is at the ZACR's "dotAfrica" room in Midrand.

On Mon, 2014-05-26 at 12:56 +0200, [email protected] wrote:
> > Am I being over-sensitive or silly?
> 
> Sounds like a David vs Goliath issue with all the romantic tones of
> that epic battle.  The public and the press would probably find this
> interesting, but whether the war can ever be one isn't clear.
> 
> I would communicate with the CO.ZA domain administrator and try to
> find support on their side.  My recommendation would be to get the
> CO.ZA admninistrator to freeze any updates to the CO.ZA domain
> involving vanilla.co.za unless they are accompanied by some certified
> documents from your organisation.  Naturally, this would have to
> become a viable channel for any other domain holders if the need
> arises.
> 
> Lucio.
> 
> 
> 
> _______________________________________________
> IOZ mailing list
> [email protected]
> http://lists.internet.org.za/mailman/listinfo/ioz

-- 
Mark James ELKINS  -  Posix Systems - (South) Africa
mje-2mCUHEwelu/[email protected]       Tel: +27.128070590  Cell: +27.826010496
For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za

_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz