[dns-operations] EDNS with IPv4 and IPv6 (DNSSEC or large answers)

Florian Weimer fw at deneb.enyo.de
Sun Oct 5 11:26:38 UTC 2014


* Hannes Frederic Sowa:

> On Tue, Sep 23, 2014, at 23:41, Mark Andrews wrote:
>> As for atomic fragments, it is a seperate issue out of control of
>> the nameserver.
>
> Because of a possible DoS vector atomic fragments will be deprecated
> soon:
> <http://tools.ietf.org/html/draft-gont-6man-deprecate-atomfrag-generation-00>

Not too surprisingly, this issue was already discussed before RFC 6946
was published, and several participants recommended to abolish atomic
fragments for various reasons, including denial-of-service issues.  At
least it's finally getting fixed.



More information about the dns-operations mailing list