Verisign fix

Robert Weber Robert.Weber at Colorado.EDU
Wed Sep 17 15:32:12 UTC 2003


If every user of bind did the deligation-only switch, what would be the 
concequence?  As I see it, this is more of a suicide pact.  Verisign is 
screwed, seeing possibly hundreds of thousands of lookups due to the 
spammers.  We are screwed because we no longer cache data for .com, etc 
requiring recursive lookups for everything.  Am I misunderstanding
how this will work?  


--
* Unixops is now supporting Gnu/Linux and FreeBSD. *

2 3 5 7 B D 11 13 17 1D 1F 25 29 2B 2F 35 3B	Robert Weber
3D 43 47 49 4F 53 59 61 65 67 6B 6D 71 7F 83	UnixOps/ITS UCB
89 8B 95 97 9D A3 A7 AD B3 B5 BF C1 C5 C7 D3	University of Colorado
DF E3 E5 E9 EF F1 FB ... still searching ...
--------

> >
> >    // Sod you Verisign
> >    zone "com" in { type delegation-only; };
> >    zone "net" in { type delegation-only; };
> >    // and the rest of you micky-mouse outfits
> >    // .cc, .cx, .io, .mp, .nu, .ph, .td, .tk, .tv, and .ws
> >    zone "cc" in { type delegation-only; };
> >    zone "cx" in { type delegation-only; };
> >    zone "io" in { type delegation-only; };
> >    zone "mp" in { type delegation-only; };
> >    zone "nu" in { type delegation-only; };
> >    zone "ph" in { type delegation-only; };
> >    zone "td" in { type delegation-only; };
> >    zone "tk" in { type delegation-only; };
> >    zone "tv" in { type delegation-only; };
> >    zone "ws" in { type delegation-only; };


More information about the bind-users mailing list