[dns-operations] knot-dns

[Roland Dobbins]

On 16 Dec 2014, at 1:42, Mike Hoskins (michoski) wrote:

> You can acknowledge things aren't a panacea, while still deriving some 
> benefits from them.

My point is that the negatives far outweigh the benefits in most 
organizations.

> Monitoring/analytics (intelligence) is key, so the operator can 
> intelligently control flows across their services based on risks and 
> observed threats.

Yes, I'm a big advocate of this - but it's honored more in the breach 
than in the observance, all in all.

Concentrating on telemetry and analytics, and in the people to utilize 
same, makes a lot more sense than concentrating on software diversity, 
in most organizations.  Worrying about software diversity is something 
to do after you've done just about everything else you can to improve 
your security posture.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>