[dns-operations] Can Root DNS server modify the response?

Dave Warren dw at thedave.ca
Wed Mar 27 04:21:32 UTC 2019


On 2019-03-26 20:51, Davey Song wrote:
> AFAIK, Root servers returning SERVFAIL to specific regions or countries 
> are listed as a risk in the circle who have long concerns on Root 
> governance. But return to Cloudflare case, it is not a problem. If two 
> letters return SERVFAIL maliciously, resolvers can query other server to 
> get the answer back. So diversity of root server operators and location 
> are important in this case.

I'd love to learn more, can you point me to an article discussing this 
topic?



More information about the dns-operations mailing list