Re: CNAME records in place of A records

2020-11-06 Thread Matthias Luft via NANOG
While the change from A to CNAME itself is probably not based on security considerations, a CNAME pointing to a CDN or similar can result in future security issues, i.e. you want to closely monitor your externally pointing CNAMEs when you get rid of external services: https://www.hackerone.com/

Re: Securing Greenfield Service Provider Clients

2020-10-09 Thread Matthias Luft via NANOG
CJ, On 09.10.20 15:09, Christopher J. Wolff wrote: Dear Nanog; Hope everyone is getting ready for a good weekend.� I�m working on a greenfield service provider network and I�m running into a security challenge.� I hope the great minds here can help. Since the majority of traffic is