dnssec keytrap vuln

Royce Williams royce at techsolvency.com
Sat Feb 17 15:46:18 UTC 2024


For me, LinkedIn renders those links as tracker links only, so I can't tell
what they are until I follow them.

Also (in Crocodile Dundee voice): *That's* not a really long list. :D

https://infosec.exchange/@tychotithonus/111924626712765292

\(disclaimer: my own work on tracking the DNSSEC validation DoS
vulnerabilities - both CVE-2023-50387 ("KeyTrap") and CVE-2023-50868 (NSEC3
vuln) - improvements welcome)

-- 
Royce Williams
Tech Solvency


On Sat, Feb 17, 2024 at 1:11 AM Dave Taht <dave.taht at gmail.com> wrote:

> Really long list of fixed dns servers here:
>
>
> https://www.linkedin.com/posts/bwoodcock_a-bunch-of-really-hard-work-over-the-past-activity-7163284274660532224-vYKv
> --
> 40 years of net history, a couple songs:
> https://www.youtube.com/watch?v=D9RGX6QFm5E
> Dave Täht CSO, LibreQos
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20240217/f744beb0/attachment.html>


More information about the NANOG mailing list