Re: [dns-wg] "DNS Vulnerabilities" paper hits the mainstream
-
To: "Jim Reid" Jim@localhost, dns-operations@localhost
-
From: "Sander Steffann" <s.steffann@localhost
-
Date: Sun, 30 Apr 2006 21:17:01 +0200
-
Organization: Computel Standby BV
Hi,
On Apr 30, 2006, at 19:25, Jim Reid wrote:
On Apr 30, 2006, at 19:25, Sander Steffann wrote:
[...]
People might get scared :) It is good that attention is given to the
risks of badly secured DNS servers, but scaring the public like this...
Indeed. Though personally speaking, I don't accept Sirer's methodolody
let alone his concluions about "vulnerabilities" or badly secured name
servers. Which doesn't for a moment mean the DNS has no vulnerablities or
badly secured servers. These do of course exist. Just not in the way Emil
Gun Sirer has suggested.
I completely agree. I already mentioned it to some people at RIPE-52, but I
forgot to mention it here. It's also on slashdot:
[Perils of DNS at RIPE-52]
http://it.slashdot.org/article.pl?sid=06/04/26/1247240
- Sander
|