DNS hardening, was Re: Dan Kaminsky

Wed Aug 5 18:31:55 UTC 2009

On Aug 6, 2009, at 1:12 AM, Douglas Otis wrote:

> Having major providers support the SCTP option will mitigate  
> disruptions caused by DNS DDoS attacks using less resources.

Can you elaborate on this (or are you referring to removing the  
spoofing vector?)?

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

         Unfortunately, inefficiency scales really well.

		   -- Kevin Lawton