Bind 9.11 serving up false answers for a single domain. (OT)

[Ondřej Surý]

> On 11. 2. 2021, at 7:01, Stuart at registry.godaddy wrote:
> 
> It's one of those old compatibility things.

Also called *downgrade attack vector*.

Stuart, there’s absolutely no reason to keep any SHA1 in the DNS at the time I am writing this message.

Cheers,
Ondrej
--
Ondřej Surý (He/Him)
ondrej at isc.org


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20210211/e2653603/attachment.bin>