Modifying a response

Peter Andreev andreev.peter at gmail.com
Wed Feb 24 13:09:52 UTC 2010


2010/2/24 Alan Clegg <aclegg at isc.org>

> Peter Andreev wrote:
>
> >     > For example: if user asks for non-existent domain, caching server
> >     > replies with some address and no-error rcode.
> >
> >     _Extremely_ bad idea.
> >
> >
> > Yes, I know, but boss is boss and task is task :).
> >
> > Thank you very much for your answer.
>
> You might want to talk to your boss about DNSSEC and how it insures that
> "answer modification" is not allowed -- and how it keeps your customers
> safe and secure and is a good selling point (see the Comcast
> announcement that was made yesterday).
>
> AlanC
>
> Oh, DNSSSEC is another headache. These two tasks doesn't influence each
other.

Thank you for advice

>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20100224/221535df/attachment.html>


More information about the bind-users mailing list