[dns-operations] Opened Pandora's box of Cache Poisoning

Steven Carr sjcarr at gmail.com
Sat May 3 12:35:28 UTC 2014


On 3 May 2014 07:40, T.Suzuki <tss at reflection.co.jp> wrote:
> Additional page:
> http://www.e-ontap.com/dns/pandora_acjp_e/

What exactly is this supposed to show? I think everyone on this list
knows what a DNS poison/injection looks like from the point of the DNS
cache/query.

I'm still failing to see what this "Pandora's Box" is? Like others
have already commented it fails to take into account DNSSEC.

Please re-evaluate your findings/paper and take into account current
best practice before posting.

Steve



More information about the dns-operations mailing list