North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Verisign brain damage and DNSSec.....Was:Re: What *are* they smoking?

  • From: Eric Germann
  • Date: Tue Sep 16 18:20:37 2003
Title: Re: Verisign brain damage and DNSSec.....Was:Re: What *are* they smoking?
And whats to say they don't get around our methods of blacklisting it by changing the IP around every zone update?
 
-----Original Message-----
From: [email protected] [mailto:[email protected]]On Behalf Of [email protected]
Sent: Tuesday, September 16, 2003 2:18 PM
To: [email protected]
Cc: [email protected]; [email protected]; [email protected]; [email protected]; [email protected]
Subject: Re: Verisign brain damage and DNSSec.....Was:Re: What *are* they smoking?

On Tue, 16 Sep 2003 11:08:11 PDT, [email protected] said:
> > On Tue, 16 Sep 2003 09:59:40 PDT, [email protected] said:

>       thats one aspect yes.  the valdiation chain should tell
>       you who signed the delegations.  It won't lie.
>       you will know that V'sign put that data there.

How frikking many hacks will we need to BIND9 to work around this braindamage?
One to stuff back in the NXDomain if the A record points there, another to
do something with make-believe DNSsec from them..... What's next?