[dns-operations] about anti-ddos DNS hostings

Florian Weimer fw at deneb.enyo.de
Tue Jun 16 20:13:46 UTC 2015


* Edward Lewis:

> It's not just a matter of the rich getting richer and the poor getting
> poorer, it's a matter rooted in a technical fault in the architecture of
> the system.

It's not a technical fault.  There's little liability for forwarding
packets with forged source addresses, or designing networks with that
flaw built into them.  There's no technical solution to that.  You
can't stop pollution by creating better filters because there is
always an incentive not to filter your waste at all.



More information about the dns-operations mailing list