* Alan Bateman: > Search for a ~1996 paper on DNS spoofing attacks from Princeton > University as that gives useful background on this topic and is the > original reason for the caching.
That paper is probably out of date by now. Interaction of expiry and poisoning hasn't been fully understood back then. > When a security manager is set then it caches forever and getByName > will always return the same address. This is probably related to DNS pinning/anti-pinning attacks, not to cache poisoning.