Re: [DNSOP] Proposal: Whois over DNS

[Paul Vixie <[e-mail]>]

John Bambenek wrote on 2019-07-09 17:29:>
> On July 1st, 2019, my DGA feeds are converting to a CC-BY-NC-SA 4.0 
> license which means commercial use will require a license. Contact 
> [e-mail] for details
> 
> On Jul 9, 2019, at 19:13, Paul Vixie <[e-mail]> wrote:
>> 
>> whois and rdap servers are a dime a dozen. i can run one for all
>> of my domains, and put it behind a rate limiter to make life
>> harder for scrapers.
>> 
> 
> The reason scraping and rate-limiting make sense with registry 
> operates servers is because scrapers want to query the whole 
> portfolio.

this is wrong. stop being obstreperous and deflective about this topic
for a few days if you want me to tell you why. i'm done otherwise.

> 
> In this scenario, the attacker only queries your record once and has 
> what he needs to move on to next domain. Any rate limit beyond 0 
> doesn’t protect you.

same.

> 
> And if you run DNS Auth, don’t have the ability to rate limit today?

i think you mean "don't you have", and no, because as i said up-thread,
i can't ask my friendly secondaries to do custom name server settings
for those of my zones they handle.

-- 
P Vixie