[dns-operations] Limiting DNSSEC-based amplification attacks (Was: Weird TXT record

[Stephane Bortzmeyer]

On Wed, Jun 22, 2011 at 12:00:34PM +0200,
 Marco Davids (SIDN) <marco.davids at sidn.nl> wrote 
 a message of 16 lines which said:

> Are you saying that, with ANY-queries blocked, a hacktivist would
> need a roughly twice as large botnet to be equally effective?

Yes. And it does not seem a big enough deterrent.