[dns-operations] "Poorly configured DNSSEC servers at root of DDoS attacks"

Wed Sep 7 12:31:23 UTC 2016

On 7 Sep 2016, at 18:44, Paul Vixie wrote:

> treat ANY as strategically valuable attack-signature that is presently 
> useful in traceback activities, and must be preserved for that purpose

Can confirm - ANY and lots of TXT responses are a very strong, useful 
signal when it comes to sorting the wheat from the chaff on the 
reflector/amplifier ---> target leg of DNS reflection/amplification 
attacks.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>