[dns-operations] DNS Attack over UDP fragmentation

[Paul Vixie]

Stephane Bortzmeyer wrote:
>
> The way I understand it: ...
>
> So, DNSSEC turned the poisoning attack from a hijacking attack to a DoS.
>
> Now, the question is: "for an attacker, is it the simplest way to do a
> DoS?" IMHO, no, so I'm not too worried about it and I still believe in
> DNSSEC.

+1.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20130906/1eb291d4/attachment.html>