Sections:
Home |
Featured Blogs |
News Briefs |
Industry Updates |
Topics |
Community
RSS Feeds, Email Updates, Mobile Edition and More: CircleID Extras
About: About CircleID | Media Coverage | CircleID Blog | Contact | Advertising Programs
Terms & Policies: Codes of Conduct | Privacy Policy | Terms of Use
RSS Feeds, Email Updates, Mobile Edition and More: CircleID Extras
About: About CircleID | Media Coverage | CircleID Blog | Contact | Advertising Programs
Terms & Policies: Codes of Conduct | Privacy Policy | Terms of Use
Copyright © 2002-2008 CircleID.
Iomemo Inc.
All rights reserved unless where otherwise noted.
Local Time: Thursday, November 20, 2008 07:29 AM PST – Page Load: 0.2610 Sec.
Local Time: Thursday, November 20, 2008 07:29 AM PST – Page Load: 0.2610 Sec.
Regarding the issue of denial-of-service, a DDoS attack that used the DNSSEC-enabled .SE zone as a payload has already beens observed in the wild - a message was posted to the dns-operations list yesterday (can't find a link to an archive, sorry). Thanks to the large RRSETs that result from signed zones, attackers no longer need an open recursive nameserver to amplify their payloads - they can just set the DNSSEC bit in their spoofed requests.
http://lists.oarci.net/pipermail/dns-operations/2006-August/000949.html