[dns-operations] "Poorly configured DNSSEC servers at root of DDoS attacks"

Dobbins, Roland rdobbins at arbor.net
Wed Sep 7 16:49:55 UTC 2016

On Sep 7, 2016, at 10:58 PM, Tony Finch <dot at dotat.at> wrote:

> BIND 9.11 can do that, though it applies to every qtype:

Yes - additional selectivity based upon query type is what's needed.   We don't want to discard EDNS0 wholesale, by any means.

Roland Dobbins <rdobbins at arbor.net>

More information about the dns-operations mailing list