Comcast doesn't give me broken name servers to use, there is no cognitive 
dissonance here :-)

You are a DNS expert. Most end users when DNS fails think everything has 
failed, including the network.

I type URLs into my browser. Do you know how many people type google into the 
google search box? Or the yahoo box?

You seem disconnected from the average user and average user tech support.

Even small networks (I have a friend with a ~100 user wisp) shouldn't run their 
own caches. The economics of it don't support this.

- Jared 

> On Oct 16, 2013, at 10:37 AM, Vernon Schryver <v...@rhyolite.com> wrote:
> 
> Folks like Comcast have large validating resolvers.  Their customers
> ] should use them.  
> 
> despite https://www.google.com/search?q=COMCAST+dns+hijacking
> 
> If you check the pages found by that URL, you'll see
>  - older reports that Comcast was phasing out DNS hijacking
>  - more recent reports of redirection or hijacking of 58/UDP
>     packets--not just falsified results from those big Comcast DNS
>     servers but packet hijacking
>  - far more complication, confusion, and mystification than is
>     realistic to expect a two person IT department to resolve.
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to