Deaggregating for emergency purposes
Brad Knowles
brad.knowles at skynet.be
Tue Aug 6 22:05:44 UTC 2002
At 6:38 PM +0000 2002/08/06, E.B. Dreger wrote:
> So explain how this is superior to DNS entr(y|ies) stating who
> your peers and upstreams are. And there's nothing to say that
> one could not specify allowed filters in DNS, too.
You don't want to do this with DNS. Trust me. There are far too
many seriously screwed up nameservers out there -- including many TLD
nameservers, and even some mildly mis-configured root nameservers.
Until such time as these issues get addressed (either DNS
software gets more idiot-resistant, or we have DNSSEC and things like
cache pollution are basically impossible), you want to find other
ways to handle these sorts of things.
--
Brad Knowles, <brad.knowles at skynet.be>
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-Benjamin Franklin, Historical Review of Pennsylvania.
GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E W+++(--) N+ !w---
O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)
More information about the NANOG
mailing list