[dns-operations] Storm on the DNS

[Daniel Karrenberg]

On 1.12.15 16:34 , Bill Woodcock wrote:
> Simply spending more money to make it less painful for people to
> ignore BCP-38 isn’t really a scalable plan.

Hear, hear! Purveyors of spoofed packets should feel the pain.

Unfortunately they will not realise that it is their negligence that
causes this. If they realise it they will likely deflect the blame by
pointing at the victims of their negligence as the source of the badness.

Also it is important to point out that there have been no reported
impacts on DNS service as such. Both DNS and the root server system is
redundant in many ways so that it works even if some quite some root
servers do not respond to all queries all the time.

In the long run more distribution may be needed to scale up. The fact
that the root zone is DNSSEC signed opens many possibilities for that ....

Daniel

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20151201/b9faa787/attachment.sig>