At 1:27 PM +0100 8/18/08, Jim Reid wrote:
The fact is DNSSEC is the *only* game in town for preventing cache poisoning.
Note the subject of this particular thread. A more carefully-worded sentence would be "The fact is DNSSEC is the *only* game in town for completely preventing cache poisoning." We have methods to reduce an attacker's ability to poison caches effectively.
--Paul Hoffman, Director --VPN Consortium _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop