[dns-operations] If I were the suspicioustype....(was:DNSAmplification Attacks)

[John Palmer (NANOG Acct)]

You  need one if your ISP doesn't provide a resolver that
uses and alternate root. That is, unless you run your own
resolver locally on your machine and give it an INS root
hint file.

Most people don't do that, Stephane. I stand by
my statement - most users will need to use an ORN

Show how they could otherwise do it.

----- Original Message ----- 
From: "Stephane Bortzmeyer" <bortzmeyer at nic.fr>
To: <dns-operations at lists.oarci.net>
Sent: Thursday, March 23, 2006 10:06 AM
Subject: Re: [dns-operations] If I were the suspicioustype....(was:DNSAmplification Attacks)


> On Thu, Mar 23, 2006 at 09:12:31AM -0600,
>  John Palmer (NANOG Acct) <nanog at adns.net> wrote 
>  a message of 49 lines which said:
> 
> > But it also denies choice to internet users who want to use
> > inclusive servers and locks people into using the ICANN root.
> 
> I was always doutbtful of John Palmer's technical abilities but this
> one is enough. He really believes you need an ORN to use an
> alternative root?
> 
> [I use ORSN nameservers at home and I certainly do not rely on ORNs,
> only on the fact that my IAP let the packets to port 53 go through
> unmolested, something that not all IAPs guarantee.]
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.oarci.net
> http://lists.oarci.net/mailman/listinfo/dns-operations
> 
>