[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87tzgqwupg.fsf@mid.deneb.enyo.de>
Date: Thu, 22 May 2008 11:31:55 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: Re: Root name server changes -> bind
* Jonathan Smith:
> Why did ICANN allow the old IP address to be taken by an untrusted
> party?
The party isn't untrusted (they're still involved in operating the B
root). They're not a third party, either, they're the legitimate owner
of that address block.
ICANN should have arranged for a longer transition period, as it was
done in previous transitions (I think a few older address still respond
to queries).
> It would seem that IPs formerly used by root DNS servers should
> be permanently retired to prevent just this sort of thing.
There's no way to retire an IP address, especially if it is located in a
network prefix that is still in production (which was a driving force
behind most past root servers migrations).
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
