[dns-operations] EDNS with IPv4 and IPv6 (DNSSEC or large answers)
Florian Weimer
fw at deneb.enyo.de
Sun Oct 5 11:26:38 UTC 2014
* Hannes Frederic Sowa:
> On Tue, Sep 23, 2014, at 23:41, Mark Andrews wrote:
>> As for atomic fragments, it is a seperate issue out of control of
>> the nameserver.
>
> Because of a possible DoS vector atomic fragments will be deprecated
> soon:
> <http://tools.ietf.org/html/draft-gont-6man-deprecate-atomfrag-generation-00>
Not too surprisingly, this issue was already discussed before RFC 6946
was published, and several participants recommended to abolish atomic
fragments for various reasons, including denial-of-service issues. At
least it's finally getting fixed.
More information about the dns-operations
mailing list