DNS security, amplification attacks and recursion
Brett at BrettDelmage.ca
Tue Jul 7 22:17:33 UTC 2020
On Tue, 7 Jul 2020, Tony Finch wrote:
> Brett Delmage <Brett at BrettDelmage.ca> wrote:
>> On Tue, 7 Jul 2020, Tony Finch wrote:
>>> minimal-any yes;
>> Why only reduce and not eliminate?
> The reason is a bit subtle. If an ANY query comes via a recursive
> resolver, it is much better to give the resolver an answer so that it will
> put an entry in its cache...
This is a very interesting and clear explanation. Thanks for taking the
time to share this Tony. TIL :-)
More information about the bind-users