[62891] in North American Network Operators' Group
Re: Verisign Responds
daemon@ATHENA.MIT.EDU (Paul Vixie)
Tue Sep 23 19:34:13 2003
To: nanog@merit.edu
From: Paul Vixie <vixie@vix.com>
Date: 23 Sep 2003 23:33:22 +0000
In-Reply-To: <3F70A396.5080108@brightok.net>
Errors-To: owner-nanog-outgoing@merit.edu
> It's still to be seen if ISC's cure is worse than the disease; as
> instead of detecting and stoping wildcard sets, it looks for delegation.
that's because wildcard ("synthesized") responses do not look different
on the wire, and looking for a specific A RR that can be changed every day
or even loadbalanced through four /16's that may have real hosts in them
seems like the wrong way forward.
--
Paul Vixie
