[dns-operations] renesys blog: Identity Theft Hits the Root Name Servers

[Roy Arends]

On May 21, 2008, at 10:38 AM, Simon Waters wrote:

>  Did the DNSSEC folk address replay attacks?

Cryptographic signatures in DNSSEC have an inception and expiration  
date. Within this timeframe, replay attacks are possible.

Roy