[dns-operations] bind-9.9.3rc2 ANY+TCP patch

[Mike Hoskins (michoski)]

-----Original Message-----

From: Vernon Schryver <vjs at rhyolite.com>
Date: Thursday, May 16, 2013 11:30 AM
To: "dns-operations at mail.dns-oarc.net" <dns-operations at mail.dns-oarc.net>
Subject: Re: [dns-operations] bind-9.9.3rc2 ANY+TCP patch

>That is mistaken.  We are talking about testing for (and perhaps
>mitigating) attack packets.  A "positive" for our test is "this packet
>is an attack packet."   Deciding that a packet is not an attack packet
>is a "negative".   An accurate test or determination that a packet is
>or is not an attack packet is a "true positive" or "true negative".
>An inaccurate determination by the test is a "false positive" or "false
>negative."

Which should really be common sense these days as it's how every firewall,
anti-malware, etc. vendor labels such things.

I'll take it as more proof English sucks.