[dns-operations] New addresses for b.root-servers.net

Manu Bretelle chantr4 at gmail.com
Fri Jun 2 18:01:31 UTC 2023


On Fri, Jun 2, 2023 at 10:20 AM Chris Adams <cma at cmadams.net> wrote:

> Once upon a time, Dave Knight <dave at knig.ht> said:
> > Aiui BIND9 uses the root.hints just once on receipt of the first query
> when starting with an empty cache, whereupon it will use the hints to find
> a root server to do a priming query, replacing the hints with the result of
> that.
>
> It's been a long while since I looked - how is that done?  Do the
> resolvers query multiple servers from their hints (and somehow resolve
> differences), or do they just pick one at random and accept the results?


That could be very implementation specific. IIRC, unbound would pick a
working one from the root.hints and prime its list from there.

>
>
> It seems like maybe if they'd query multiple and take a majority opinion
> of the results, the potential damage of hijacking of an old IP would be
> minimized.
> --
> Chris Adams <cma at cmadams.net>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20230602/5c7a594e/attachment.html>


More information about the dns-operations mailing list