[dns-operations] Stunning security discovery: AXFR may leak information

Paul Wouters paul at nohats.ca
Tue Apr 14 14:20:16 UTC 2015


On Tue, 14 Apr 2015, Mark Jeftovic wrote:

> Joke all you want. This is worse than heartbleed.

Well, no. heartbleed could leak private (key) data. AXFR only leaks that
which you are already willing to give to any stranger who knows what
question to ask or who asks 6 billion questions :P

Paul



More information about the dns-operations mailing list