[dns-operations] "Poorly configured DNSSEC servers at root of DDoS attacks"

[Dobbins, Roland]

On Sep 7, 2016, at 10:58 PM, Tony Finch <dot at dotat.at> wrote:

> BIND 9.11 can do that, though it applies to every qtype:

Yes - additional selectivity based upon query type is what's needed.   We don't want to discard EDNS0 wholesale, by any means.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>