[dns-operations] root? we don't need no stinkin' root!

Tony Finch dot at dotat.at
Fri Nov 29 19:34:56 UTC 2019

Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> refection of answers to forged source IPs is not available with TCP

Attackers can get a small amplification from SYN/ACK retries, and this is
being used in the wild.


f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Trafalgar: Variable 3 or less in southeast, southwesterly 3 to 5 in northwest.
Moderate, occasionally rough in north and slight in southeast. Showers. Good,
occasionally moderate.

More information about the dns-operations mailing list