On Mon, Nov 18, 2002 at 01:38:13PM -0600, Kirk Strauser wrote:
> 
> At 2002-11-18T18:12:13Z, "Gary Hennigan" <[EMAIL PROTECTED]> writes:
> 
> > ...if security is *the* major concern in a DNS installation it's probably
> > a good idea to stay away from BIND altogether.
> 
> I'd disagree for one main reason: BIND is Open Source, and tinydns is not.
Uh, of course tinydns (sic; it's really djbdns) is open source.
Perhaps you meant to say _DFSG Free_ ?

> More security compromises have been found in the former, but it has perhaps
> 100 times the number of users testing it and programmers examining it.
> Frankly, as a programmer, I would not waste my time auditing tinydns when I
> could make a bigger contribution to BIND.

Good for you.

-- 
Nathan Norman - Incanus Networking mailto:[EMAIL PROTECTED]
  Good judgement comes from experience.
  Experience comes from bad judgement.
          -- Unattributed


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to