[dns-operations] Defending against DNS reflection amplification attacks

Paul Hoffman paul.hoffman at vpnc.org
Sun Feb 24 23:58:30 UTC 2013


On Feb 24, 2013, at 3:03 PM, Jo Rhett <jrhett at netconsonance.com> wrote:

> On Feb 24, 2013, at 2:50 PM, Joe Abley wrote:
>> I am always wary of assertions of law, made by non-lawyers especially, where there's an implicit assumption that there's a single legal system we're dealing with, in a single jurisdiction, when the Internet (even ignoring Seth Breidbart) is necessarily global and supernational. 
>> Even with citations from case law in particular justifications, I find this line of thinking questionable in a global context. 
> 
> I'll take my experience over your thoughts any time ;-)  You can find it questionable all you want. The line of reasoning is valid in a US context, and it will help bring about more BCP38 players.

You said that you weren't a lawyer, and you said these cases were a decade ago. That's a few strikes against "will".

> This isn't my legal theory. This is what I've observed used very successfully in the courtroom, and have taken the considerations of this to various carriers with great success.

I would love to believe you, even if only for the US context which I live in. You have shown no evidence that these "cases" exist, much less that they hinged on BCP38.

--Paul Hoffman


More information about the dns-operations mailing list