[dns-operations] PowerDNS vulnerabilities

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue Nov 28 12:34:12 UTC 2017


On Tue, Nov 28, 2017 at 12:26:25PM +0000,
 Jim Reid <jim at rfc1035.com> wrote 
 a message of 15 lines which said:

> However using these sorts of lists to get an even wider distribution
> wouldn’t hurt. YMMV.

Note that there was an article in the Internet tabloid:

http://www.theregister.co.uk/2017/11/28/powerdns_dnssec_bugs/

The "explanations" mix up DNS with BGP! "for example, if a network is
tricked into advertising itself as the whole of the Internet, it can
be hosed, or if the wrong network promises it's the best way to reach
YouTube, then YouTube is blackholed." All this with PowerDNS :-)





More information about the dns-operations mailing list