The last released djbdns is vulnerable to simple poisoning attacks however. It does not merge duplicate queries, permitting infinite retries of spoofing (just like Kaminsky's child label-NS replacement technique). This…
I thought your first comment was just grumbling, but this comment suggests some misunderstanding. The root zsk is split over a group (Shamir share) held by mostly non-US key holders. (One from the US is Dan Kaminsky,…
The last released djbdns is vulnerable to simple poisoning attacks however. It does not merge duplicate queries, permitting infinite retries of spoofing (just like Kaminsky's child label-NS replacement technique). This…
I thought your first comment was just grumbling, but this comment suggests some misunderstanding. The root zsk is split over a group (Shamir share) held by mostly non-US key holders. (One from the US is Dan Kaminsky,…