North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Verisign Responds

  • From: Paul Vixie
  • Date: Tue Sep 23 19:35:55 2003

> It's still to be seen if ISC's cure is worse than the disease; as 
> instead of detecting and stoping wildcard sets, it looks for delegation. 

that's because wildcard ("synthesized") responses do not look different
on the wire, and looking for a specific A RR that can be changed every day
or even loadbalanced through four /16's that may have real hosts in them
seems like the wrong way forward.
-- 
Paul Vixie