<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On Jan 13, 2009, at 4:34 PM, Paul Vixie wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>in <a href="http://gcn.com/articles/2009/01/12/dns-requires-a-layered-approach.aspx">http://gcn.com/articles/2009/01/12/dns-requires-a-layered-approach.aspx</a> we<br>see the following exchange:<br><br><span class="Apple-tab-span" style="white-space:pre"> </span>"GCN: BIND, which is the most widely used DNS server, is open<br><span class="Apple-tab-span" style="white-space:pre"> </span>source. How safe are the latest versions of it?<br><br><span class="Apple-tab-span" style="white-space:pre"> </span>TOVAR: For a lot of environments, it is perfectly suitable. But in<br><span class="Apple-tab-span" style="white-space:pre"> </span>any mission-critical network in the government sector, any<br><span class="Apple-tab-span" style="white-space:pre"> </span>financial institution, anything that has the specter of identity<br><span class="Apple-tab-span" style="white-space:pre"> </span>theft or impact on national security, I think using open source is<br><span class="Apple-tab-span" style="white-space:pre"> </span>just folly."<br><br>anything i might say would be seen as self serving, so i hope that others<br>here who are not DNS implementors will add professionally worded comments<br>to this article explaining your views about the need for critical<br>infrastructure to have some open source mixed into it.<br></div></blockquote><br></div><div>You made an interesting statement when the article says:</div><div><br></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;"><span class="Apple-style-span" style="font-family: Arial; font-size: 12px; font-style: italic; ">However, patches and DNSsec are not enough to secure this critical infrastructure, said <b>Tom Tovar</b>, chief executive officer of Nominum, a supplier of network naming and address tools. Layered defenses need to be built into the DNS software of critical servers, Tovar said. He spoke recently with GCN about the challenges of DNS security.</span></blockquote><font class="Apple-style-span" face="Arial" size="3"><span class="Apple-style-span" style="font-size: 12px;"><i><span class="Apple-style-span" style="font-family: Helvetica; font-size: 14px; font-style: normal; "><div><br></div><div>"Self serving"? Against the person that is CEO for the company that markets the product being "sold" in the article?</div><div><br></div><div>Paul, I'd say that any comments that you make about this article shouldn't be considered as self-serving, but I do understand you hesitation. You are showing more restraint than Tom Tovar.</div><div><br></div><div><br></div></span></i></span></font></body></html>