"stealth master" DNS Security

[Ram Akuka]

2009/3/25 Alan Clegg <Alan_Clegg at isc.org>:
> Ram Akuka wrote:
>
>> Is there's any way I can encrypt the zone transfer date (without using
>> any third-party encryption tool)?
>
> Why exactly do you want to do this?
>
> DNS data is NOT PROTECTED DATA.
>
> As long as queries and responses are permitted in the clear (which is
> the way DNS works), you are only fooling yourself by doing all of this
> "encryption".
>
> AlanC

indeed this is not protected data , but i don't want to give to a
potential intruder all the data of all my clients just by listening to
my zone transfer data.
but in the overall i agree the best way to do it is by securing my servers.

thanks anyway ,


Ram

>
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>