Firms Tackle Security Flaw In Web Addressing System

John Hascall john at iastate.edu
Fri Jul 11 15:06:39 UTC 2008


> > Also as a "NetReg" site we are heavily into dynamic dns update - how,
> > if at all, is that effected?
> 
> 	For BIND 9.5 you need to freeze once a periodically to
> 	re-sign records that have not been re-signed as part of the
> 	update process.  BIND 9.6 will re-sign the zone as needed.

     So, under 9.5 new records will look "untrustworthy"
     until the zone is frozen and re-signed?

     Under 9.6 is there any sort of service outage/delay
     during this auto-re-signing?  We have zones with
     tens of thousands of records and during certain
     times of the year the updates come pretty fast.

Thanks,
John


More information about the bind-users mailing list