DNS hardening, was Re: Dan Kaminsky

Roland Dobbins rdobbins at arbor.net
Wed Aug 5 13:31:55 CDT 2009


On Aug 6, 2009, at 1:12 AM, Douglas Otis wrote:

> Having major providers support the SCTP option will mitigate  
> disruptions caused by DNS DDoS attacks using less resources.

Can you elaborate on this (or are you referring to removing the  
spoofing vector?)?

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

         Unfortunately, inefficiency scales really well.

		   -- Kevin Lawton





More information about the NANOG mailing list