On Thu, 2011-03-03 at 12:45 +0100, Bastien ROUCARIES wrote: > main security problem is resolver, > $host -v www.local > www.local > www.local.mydomain.com > > see security issue in draft paper also in case > http://tools.ietf.org/html/draft-cheshire-dnsext-multicastdns-08
resolver is more like the “client” side of things, while service publication is more the “server” side of things. If you don't want your host to resolve “local” stuff at all, you can edit /etc/nsswitch.conf and remove the mdns stuff. Regards, -- Yves-Alexis -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1299229500.26397.4.camel@oban
