IETF Logo Mail Archive

Re: [Asrg] DNS over SCTP (was: Re: DNS-based Email Sender Authentication Mechanisms: a Critical Review

SM <sm@resistor.net> Thu, 28 May 2009 17:14 UTC

Return-Path: <sm@resistor.net>
X-Original-To: asrg@core3.amsl.com
Delivered-To: asrg@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5B8F03A6D2F for <asrg@core3.amsl.com>; Thu, 28 May 2009 10:14:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.492
X-Spam-Level:
X-Spam-Status: No, score=-2.492 tagged_above=-999 required=5 tests=[AWL=0.107, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m-qWnU+pQq83 for <asrg@core3.amsl.com>; Thu, 28 May 2009 10:14:33 -0700 (PDT)
Received: from ns1.qubic.net (ns1.qubic.net [208.69.177.116]) by core3.amsl.com (Postfix) with ESMTP id 295373A6CCE for <asrg@irtf.org>; Thu, 28 May 2009 10:14:33 -0700 (PDT)
Received: from subman.resistor.net ([10.0.0.1]) (authenticated bits=0) by ns1.qubic.net (8.14.4.Alpha0/8.14.4.Alpha0) with ESMTP id n4SHFxb1013876 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <asrg@irtf.org>; Thu, 28 May 2009 10:16:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1243530973; x=1243617373; bh=KIw5pMmwTu55EXWTwP289CMGm+zHf8r511D1xFMOW4M=; h=Message-Id:Date:To:From:Subject:In-Reply-To:References: Mime-Version:Content-Type:Cc; b=MKEuLumZ1usgqAXj+d8Tu6NLRoS/Mxt5TiyEgDljKRC6DsB/3tzPLtjG3aiJiNTHn M/L7ZZBshcav1YbCJMu6DlVsq0m0ZqID9RRWlL+569FvM3PZ4bZH3ZVogX35j7ZsT8 qW12POJJDaSmei8iP/T5KIQj72dQWd7kq4QLhoKQ=
DomainKey-Signature: a=rsa-sha1; s=mail; d=resistor.net; c=simple; q=dns; b=lI1SQKgtYpETBP0e+povENsJ6efluT4FUuA5LdMKLGLHZOy7uQavJS7DsHLoVG2XF se88QPhmhcGoXlN4zGxZjJhhZd881BRoBpVyBbz9N4FjNaR+iBUpNB7hUOJnngP7pt6 /OSkkoia4fqpdR4yQ3qhAe55XPug8J9r2dg11gU=
Message-Id: <6.2.5.6.2.20090528095302.0352a180@resistor.net>
X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6
Date: Thu, 28 May 2009 10:11:52 -0700
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
From: SM <sm@resistor.net>
In-Reply-To: <4A1E8BD3.8000103@tana.it>
References: <003d01c9dd01$bf3531d0$800c6f0a@china.huawei.com> <4A1A45BA.5030704@swin.edu.au> <3be421270905250718y5d62f6d5odb6f2bebecf418d0@mail.gmail.com> <6684E747-55CB-4BB3-B838-9F4FE906AFE7@mail-abuse.org> <200905251603.MAA16221@Sparkle.Rodents-Montreal.ORG> <CCE0A3E1-4BCB-460C-AEA0-6548BB4AE8FE@mail-abuse.org> <4A1D64C9.5060505@tana.it> <47BC2197-472E-4615-97D2-F7E42B8F3B7D@mail-abuse.org> <4A1E8BD3.8000103@tana.it>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Subject: Re: [Asrg] DNS over SCTP (was: Re: DNS-based Email Sender Authentication Mechanisms: a Critical Review
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 May 2009 17:14:38 -0000

At 06:04 28-05-2009, Alessandro Vesely wrote:
>Douglas Otis wrote:
>>>Just using TCP would prevent most of the DNS poisoning attacks 
>>>that Amir's paper reports.
>>TCP is prone to DDoS attack.  As such, TCP is seldom used with DNS.
>
>I thought TCP was the default when the UDP message size is not 
>enough. That's, AFAIK, the

It is.  The statement about why TCP is seldom used is incorrect.

    "UDP is not acceptable for zone transfers, but is the recommended
     method for standard queries in the Internet."

UDP is used as the message is generally less than 512 bytes.  I'm 
ignoring EDNS0 support.  If the message is truncated, a TCP connection is used.

Regards,
-sm

v2.23.0 | Report a Bug | By Email