[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <87myklr529.fsf@mid.deneb.enyo.de>
Date: Sun, 13 Jul 2008 20:51:10 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: Re: DNS vulnerability: other relevant software
* Bernhard R. Link:
> if there are many queries, I think attacking only gets harder, because
> guessing the order of requests gets harder to predict, adding more
> variables.
Right.
> I'm also looking forward to this. I was under the impression that is was
> common knowledg that dns is simply insecure, everyone trusting on it is
> insane, and security issues meaning it is easier to hijack than it
> should be (like dns servers accepting answers for things they never
> asked for and things like that).
Online banking security mainly relies on the integrity of DNS and
routing. (Bert's DNS forgery resilience draft actually covers this, and
I think he's right.)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
