Question re prevention of enumeration with DNSSEC (NSEC3, etc.)

John Levine johnl at iecc.com
Tue May 10 02:58:06 UTC 2022


It appears that Ray Bellis <ray at bellis.me.uk> said:
>
>> Is there any case law where someone has asserted a database right for a DNS zone?
>
>> It seems like a rather stupid thing to do. If someone asserted such a
>> right, I would make sure not to infringe it by ensuring no entries
>> from that database entered my DNS caches or other software.
>
>It wasn’t the zone itself as such - the concern was use of enumerated zone data to then perform bulk collection of Whois data.

It's perfectly reasonable to claim a database right in the WHOIS data,
but the offense is scraping WHOIS, not enumerating the DNS zone.

I could enumerate the DNS zone twice a day every day and so long as I stayed
away from WHOIS, nobody would notice or care.

R's,
John


More information about the NANOG mailing list