[62247] in North American Network Operators' Group
Re: Root Server Operators (Re: What *are* they smoking?)
daemon@ATHENA.MIT.EDU (Sean Donelan)
Wed Sep 17 00:53:44 2003
Date: Wed, 17 Sep 2003 00:48:09 -0400 (EDT)
From: Sean Donelan <sean@donelan.com>
To: Paul Vixie <vixie@vix.com>
Cc: nanog@merit.edu
In-Reply-To: <g37k48hvzo.fsf@sa.vix.com>
Errors-To: owner-nanog-outgoing@merit.edu
On 17 Sep 2003, Paul Vixie wrote:
> > Anyone have a magic named.conf incantation to counter the verisign
> > braindamage?
>
> zone "com" { type delegation-only; };
> zone "net" { type delegation-only; };
>
> > Or does this require a patch to bind?
>
> yes, it does. to be released shortly.
With enough levels of indirection any computing problem can be solved.
So, Verisign just returns a NS pointer to another name server Verisign
controls which then answers the queries with Verisign's "helpful" web
site.
Half-life of the patch: 1 day?
