I’ve written up a method to defeat UDP fragmentation attacks using TSIG. https://tools.ietf.org/html/draft-andrews-dnsop-defeat-frag-attack-00
If we are going to discuss methods to defeat such attacks this should be considered. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
