On Tue, Mar 26, 2013 at 7:14 PM, Matthew Petach <mpet...@netflight.com> wrote:
> > The concern Valdis raised about securing recursives while still > being able to issue static nameserver IPs to mobile devices > is an orthogonal problem to Owen putting rate limiters on > the authoritative servers for he.net. If we're all lighting up > pitchforks and raising torches, I'd kinda like to know at which > castle we're going to go throw pitchforks. > Open Recursive DNS Resolvers. The need to start seriously addressing this issue is kind of dire. The problem with DNS Amplification attacks is getting worse, not better. Oh yeah... and BCP38, too. :-) They both kind of go hand-in-hand. - ferg -- "Fergie", a.k.a. Paul Ferguson fergdawgster(at)gmail.com
