On Mar 26, 2013, at 7:04 PM, Matthew Petach <mpet...@netflight.com> wrote:
> On Tue, Mar 26, 2013 at 6:06 PM, John Levine <jo...@iecc.com> wrote: >>> As a white-hat attempting to find problems to address through legitimate >>> means, how >>> do you … >> >> You make friends with people with busy authoritative servers and see >> who's querying them. > > I'm confused. Don't most authoritative servers have to > answer to just about anyone in order to be useful? If you give the same answer 15x to the same person in a few seconds one can possibly infer they aren't a caching resolver or are broken. Either way you can think about ignoring them for a few with dampening or similar.