DNSSEC and CVE-2012-1033 (Ghost domain names)

[Casey Deccio]

On Fri, Feb 10, 2012 at 2:27 PM, Casey Deccio <casey at deccio.net> wrote:

> Unless future specification or implementation designated that delegation
> follow the same model as trust--that is, that a delegation only last as
> long as the parent said it did.


I hadn't previously read Paul's resimprove draft on this topic, but it was
newly posted on dns-operations, and it describes this very behavior.

http://tools.ietf.org/html/draft-vixie-dnsext-resimprove-00

Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120210/3aa659db/attachment.html>