DNSSEC and CVE-2012-1033 (Ghost domain names)
Casey Deccio
casey at deccio.net
Sat Feb 11 06:47:01 UTC 2012
On Fri, Feb 10, 2012 at 2:27 PM, Casey Deccio <casey at deccio.net> wrote:
> Unless future specification or implementation designated that delegation
> follow the same model as trust--that is, that a delegation only last as
> long as the parent said it did.
I hadn't previously read Paul's resimprove draft on this topic, but it was
newly posted on dns-operations, and it describes this very behavior.
http://tools.ietf.org/html/draft-vixie-dnsext-resimprove-00
Casey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120210/3aa659db/attachment.html>
More information about the bind-users
mailing list