[dns-operations] Massive DNS poisoning attacks in Brazil

[Stephane Bortzmeyer]

On Mon, Nov 07, 2011 at 03:11:00PM +0100,
 Olaf Kolkman <olaf at NLnetLabs.nl> wrote 
 a message of 110 lines which said:

> All the same it occurs to me that DNSSEC validation at the host
> would have prevented this (if the authoritative zones in questions
> would have been signed).

Yes, and I've heard of a program which may helps:

http://ripe63.ripe.net/presentations/172-RIPEWG-DNSSEC-trigger.pdf