Deaggregating for emergency purposes

Brad Knowles brad.knowles at skynet.be
Tue Aug 6 22:05:44 UTC 2002


At 6:38 PM +0000 2002/08/06, E.B. Dreger wrote:

>  So explain how this is superior to DNS entr(y|ies) stating who
>  your peers and upstreams are.  And there's nothing to say that
>  one could not specify allowed filters in DNS, too.

	You don't want to do this with DNS.  Trust me.  There are far too 
many seriously screwed up nameservers out there -- including many TLD 
nameservers, and even some mildly mis-configured root nameservers.

	Until such time as these issues get addressed (either DNS 
software gets more idiot-resistant, or we have DNSSEC and things like 
cache pollution are basically impossible), you want to find other 
ways to handle these sorts of things.

-- 
Brad Knowles, <brad.knowles at skynet.be>

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
     -Benjamin Franklin, Historical Review of Pennsylvania.

GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E W+++(--) N+ !w---
O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)



More information about the NANOG mailing list