[dns-operations] DNS Attack over UDP fragmentation

Paul Vixie paul at redbarn.org
Fri Sep 6 07:54:23 UTC 2013



Stephane Bortzmeyer wrote:
>
> The way I understand it: ...
>
> So, DNSSEC turned the poisoning attack from a hijacking attack to a DoS.
>
> Now, the question is: "for an attacker, is it the simplest way to do a
> DoS?" IMHO, no, so I'm not too worried about it and I still believe in
> DNSSEC.

+1.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.dns-oarc.net/pipermail/dns-operations/attachments/20130906/1eb291d4/attachment.html>


More information about the dns-operations mailing list