[dns-operations] attention yahoo, microsoft, wikipedia, akamai, and akamai customers

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue Apr 4 19:41:17 UTC 2006

Studying our www.afnic.fr (a CNAME with an out-of-zone RHS), and the
the queries received by our BIND nameserver ns3.nic.fr (which is
authoritative for both nic.fr and afnic.fr), we note that one third of
queries for www.afnic.fr are *not* followed by a query for
rigolo.nic.fr, the canonical name.

We can conclude that one third of the resolvers in the wild are not
paranoid enough. They accept out-of-zone data.

More information about the dns-operations mailing list