[dns-operations] DNS Attack over UDP fragmentation

Randy Bush randy at psg.com
Thu Sep 5 15:05:55 UTC 2013

> My opinion is that, yes, it is a real and practical attack, and it
> could be prevented by full deployment of DNSSEC. (Deploying IPv6 would
> help, too, for the reasons explained here.)

you may want to defend against it this decade


More information about the dns-operations mailing list