[29270] in bugtraq
Re: [Summary of Responses] Bound by Tradition: A sampling of the security posture of the Internet's DNS servers
daemon@ATHENA.MIT.EDU (Mike Bell)
Wed Mar 12 12:19:25 2003
Date: Tue, 11 Mar 2003 20:10:28 -0800
From: Mike Bell <mike@mikebell.org>
To: Mike Schiffman <mike@infonexus.com>
Message-ID: <20030312041027.GH599@mikebell.org>
Mail-Followup-To: Mike Schiffman <mike@infonexus.com>,
bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <003801c2e7eb$8064b690$1700a8c0@ratpack>
On Tue, Mar 11, 2003 at 08:30:17AM -0800, Mike Schiffman wrote:
> 12) It is a bit misleading to say djbdns has no security
> vulnerabilities. While it is true that the component programs that
> make up djbdns have not had a known vulnerability, the design of djbdns
> relies on external services (Bernstein recommends rsync over ssh, I
> believe) to replicate data from the primary to secondaries.
By that logic a bug in vi is a bug in BIND, because you need an editor
to maintain zone files.
DJB may recommend rsync over ssh, but djbdns as distributed by DJB only
offers that as one potential way to get data from one computer to another,
you can use any means you see fit to do so.
