Re: [DNSOP] Cache poisoning on DNSSEC
Mark Andrews <Mark_Andrews@isc.org> Wed, 27 August 2008 00:48 UTC
Return-Path: <dnsop-bounces@ietf.org>
X-Original-To: dnsop-archive@optimus.ietf.org
Delivered-To: ietfarch-dnsop-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9FDD53A6C38; Tue, 26 Aug 2008 17:48:32 -0700 (PDT)
X-Original-To: dnsop@core3.amsl.com
Delivered-To: dnsop@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6D81D3A6C0A for <dnsop@core3.amsl.com>; Tue, 26 Aug 2008 17:48:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.024
X-Spam-Level:
X-Spam-Status: No, score=-0.024 tagged_above=-999 required=5 tests=[AWL=2.575, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AeCOS7ugYsUC for <dnsop@core3.amsl.com>; Tue, 26 Aug 2008 17:48:30 -0700 (PDT)
Received: from drugs.dv.isc.org (drugs.dv.isc.org [IPv6:2001:470:1f00:820:214:22ff:fed9:fbdc]) by core3.amsl.com (Postfix) with ESMTP id D1E0E3A6A19 for <dnsop@ietf.org>; Tue, 26 Aug 2008 17:48:25 -0700 (PDT)
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.2/8.14.2) with ESMTP id m7R0mFQ0051227; Wed, 27 Aug 2008 10:48:16 +1000 (EST) (envelope-from marka@drugs.dv.isc.org)
Message-Id: <200808270048.m7R0mFQ0051227@drugs.dv.isc.org>
To: Dean Anderson <dean@av8.com>
From: Mark Andrews <Mark_Andrews@isc.org>
In-reply-to: Your message of "Tue, 26 Aug 2008 15:02:07 -0400." <Pine.LNX.4.44.0808261445330.13198-100000@citation2.av8.net>
Date: Wed, 27 Aug 2008 10:48:15 +1000
Cc: "Blacka, David" <davidb@verisign.com>, Ralf Weber <denic@eng.colt.net>, "dnsop@ietf.org WG" <dnsop@ietf.org>
Subject: Re: [DNSOP] Cache poisoning on DNSSEC
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/dnsop>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: dnsop-bounces@ietf.org
Errors-To: dnsop-bounces@ietf.org
> Large UDP packets (think EDNSO DNSSEC as a good example of large UDP > packets almost certain to be fragmented) suffer the same problem, as > they can be fragmented by PMTU discovery. The server (operating system) > has to maintain UDP state for PMTUD to work. If the ICMP fragmentation > needed is lost due to Anycast, PMTUD will fail. Lost UDP fragments are > fatal to the UDP transaction. Actually you just turn off PMTUD on replies. This is recommended for *all* nameservers. It's pointless for authoritative nameservers to maintain PMTU state and may infact be a DoS vector if they do. IPv4 - Don't set FD. IPv6 - Fragment at the server at network MTU. The socket option IPV6_USE_MIN_MTU was a direct consequence of DNS operators looking at this issue over 10 years ago. http://www3.tools.ietf.org/html/draft-ietf-ipngwg-bsd-frag-01 Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
- [DNSOP] Kaminsky on djbdns bugs (fwd) Dean Anderson
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Dean Anderson
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Paul Wouters
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Andras Salamon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Tony Finch
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ben Laurie
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Tony Finch
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ben Laurie
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Paul Vixie
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Dean Anderson
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Paul Wouters
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Masataka Ohta
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Mark Andrews
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Mark Andrews
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Masataka Ohta
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Masataka Ohta
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Mark Andrews
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Masataka Ohta
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Andrew Sullivan
- Re: [DNSOP] A different question (was Re: Kaminsk… Jaap Akkerhuis
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Dean Anderson
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Patrik Wallstrom
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Dean Anderson
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Dean Anderson
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) David Conrad
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Paul Wouters
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Joe Abley
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Masataka Ohta
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Andrew Sullivan
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ralf Weber
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Wes Hardaker
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ralf Weber
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Masataka Ohta
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Evan Hunt
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Paul Wouters
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Ted Lemon
- [DNSOP] A different question (was Re: Kaminsky on… David Conrad
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… Frederico A C Neves
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Hoffman
- Re: [DNSOP] A different question (was Re: Kaminsk… David Conrad
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Hoffman
- Re: [DNSOP] A different question (was Re: Kaminsk… David Conrad
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Hoffman
- Re: [DNSOP] Kaminsky on djbdns bugs (fwd) Mark Andrews
- Re: [DNSOP] deprecating dangerous bit patterns an… Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… Patrik Fältström
- Re: [DNSOP] A different question (was Re: Kaminsk… Masataka Ohta
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… Ted Lemon
- Re: [DNSOP] A different question (was Re: Kaminsk… Mark Andrews
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… Masataka Ohta
- Re: [DNSOP] A different question (was Re: Kaminsk… Ted Lemon
- Re: [DNSOP] A different question (was Re: Kaminsk… Ondřej Surý
- Re: [DNSOP] A different question (was Re: Kaminsk… Jaap Akkerhuis
- Re: [DNSOP] A different question (was Re: Kaminsk… Masataka Ohta
- Re: [DNSOP] A different question (was Re: Kaminsk… Ted Lemon
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… David Conrad
- Re: [DNSOP] A different question (was Re: Kaminsk… Mark Andrews
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… Ted Lemon
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- [DNSOP] Pointless FUD and confusion about DNSSEC … Jim Reid
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Wouters
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Wouters
- Re: [DNSOP] Pointless FUD and confusion about DNS… Masataka Ohta
- Re: [DNSOP] Pointless FUD and confusion about DNS… Mark Andrews
- Re: [DNSOP] Pointless FUD and confusion about DNS… Joe Baptista
- Re: [DNSOP] Pointless FUD and confusion about DNS… Paul Hoffman
- Re: [DNSOP] A different question (was Re: Kaminsk… Joe Baptista
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] Pointless FUD and confusion about DNS… Masataka Ohta
- Re: [DNSOP] Pointless FUD and confusion about DNS… Mark Andrews
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] Pointless FUD and confusion about DNS… Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Wouters
- Re: [DNSOP] Pointless FUD and confusion about DNS… Masataka Ohta
- [DNSOP] DNS over TCP *currently* does not scale bert hubert
- Re: [DNSOP] Pointless FUD and confusion about DNS… Jim Reid
- Re: [DNSOP] A different question (was Re: Kaminsk… Andrew Sullivan
- Re: [DNSOP] A different question (was Re: Kaminsk… Peter Koch
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Hoffman
- [DNSOP] deprecating dangerous bit patterns and no… Paul Vixie
- Re: [DNSOP] deprecating dangerous bit patterns an… bert hubert
- Re: [DNSOP] A different question (was Re: Kaminsk… Dean Anderson
- Re: [DNSOP] DNS over TCP *currently* does not sca… Dean Anderson
- Re: [DNSOP] deprecating dangerous bit patterns an… Brian Dickson
- Re: [DNSOP] deprecating dangerous bit patterns an… bert hubert
- Re: [DNSOP] Pointless FUD and confusion about DNS… Dean Anderson
- Re: [DNSOP] Pointless FUD and confusion about DNS… Dean Anderson
- [DNSOP] Fwd: Pointless FUD and confusion about DN… Joe Baptista
- Re: [DNSOP] Fwd: Pointless FUD and confusion abou… Ted Lemon
- Re: [DNSOP] deprecating dangerous bit patterns an… bert hubert
- Re: [DNSOP] Pointless FUD and confusion about DNS… Andrew Sullivan
- Re: [DNSOP] deprecating dangerous bit patterns an… Brian Dickson
- Re: [DNSOP] Fwd: Pointless FUD and confusion abou… Joe Baptista
- Re: [DNSOP] Fwd: Pointless FUD and confusion abou… Ted Lemon
- Re: [DNSOP] deprecating dangerous bit patterns an… Paul Vixie
- Re: [DNSOP] deprecating dangerous bit patterns an… bert hubert
- Re: [DNSOP] deprecating dangerous bit patterns an… bert hubert
- Re: [DNSOP] deprecating dangerous bit patterns an… Paul Vixie
- Re: [DNSOP] Pointless FUD and confusion about DNS… Paul Wouters
- Re: [DNSOP] Fwd: Pointless FUD and confusion abou… Paul Wouters
- Re: [DNSOP] deprecating dangerous bit patterns an… Paul Wouters
- Re: [DNSOP] deprecating dangerous bit patterns an… bert hubert
- Re: [DNSOP] A different question (was Re: Kaminsk… David Conrad
- Re: [DNSOP] deprecating dangerous bit patterns an… Paul Vixie
- [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] deprecating dangerous bit patterns an… Mark Andrews
- Re: [DNSOP] Cache poisoning on DNSSEC David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Wouters
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC David Conrad
- Re: [DNSOP] A different question sthaug
- Re: [DNSOP] A different question (was Re: Kaminsk… Andrew Sullivan
- Re: [DNSOP] A different question (was Re: Kaminsk… bert hubert
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC David Ulevitch
- Re: [DNSOP] Cache poisoning on DNSSEC Richard Lamb
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Wouters
- Re: [DNSOP] A different question (was Re: Kaminsk… bert hubert
- Re: [DNSOP] A different question David Conrad
- Re: [DNSOP] A different question (was Re: Kaminsk… David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC David Conrad
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Wouters
- Re: [DNSOP] Cache poisoning on DNSSEC Ted Lemon
- Re: [DNSOP] A different question (was Re: Kaminsk… Paul Wouters
- Re: [DNSOP] Cache poisoning on DNSSEC David Ulevitch
- Re: [DNSOP] A different question (was Re: Kaminsk… David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC David Ulevitch
- Re: [DNSOP] Cache poisoning on DNSSEC David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC kevin graham
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Wouters
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Wouters
- Re: [DNSOP] A different question (was Re: Kaminsk… bert hubert
- Re: [DNSOP] A different question (was Re: Kaminsk… Andrew Sullivan
- Re: [DNSOP] A different question (was Re: Kaminsk… bert hubert
- Re: [DNSOP] A different question (was Re: Kaminsk… Ted Lemon
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Ted Lemon
- Re: [DNSOP] A different question (was Re: Kaminsk… Jaap Akkerhuis
- Re: [DNSOP] deprecating dangerous bit patterns an… Florian Weimer
- Re: [DNSOP] A different question (was Re: Kaminsk… Jelte Jansen
- Re: [DNSOP] A different question (was Re: Kaminsk… Alexander Gall
- Re: [DNSOP] Cache poisoning on DNSSEC Ondřej Surý
- Re: [DNSOP] A different question Florian Weimer
- Re: [DNSOP] A different question (was Re: Kaminsk… Mark Andrews
- Re: [DNSOP] A different question (was Re: Kaminsk… Masataka Ohta
- Re: [DNSOP] deprecating dangerous bit patterns an… Paul Vixie
- Re: [DNSOP] A different question Florian Weimer
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] A different question (was Re: Kaminsk… Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Vixie
- Re: [DNSOP] A different question Florian Weimer
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Vixie
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question (was Re: Kaminsk… David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC Andrew Sullivan
- Re: [DNSOP] A different question (was Re: Kaminsk… Mark Andrews
- Re: [DNSOP] deprecating dangerous bit patterns an… Florian Weimer
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question (was Re: Kaminsk… Masataka Ohta
- Re: [DNSOP] deprecating dangerous bit patterns an… Paul Vixie
- Re: [DNSOP] A different question Florian Weimer
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Paul Hoffman
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC David Ulevitch
- Re: [DNSOP] Cache poisoning on DNSSEC Brian Dickson
- Re: [DNSOP] Cache poisoning on DNSSEC David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Vixie
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Hoffman
- Re: [DNSOP] A different question (was Re: Kaminsk… Francis Dupont
- Re: [DNSOP] A different question Francis Dupont
- Re: [DNSOP] A different question David Conrad
- Re: [DNSOP] deprecating dangerous bit patterns an… Francis Dupont
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] Cache poisoning on DNSSEC Francis Dupont
- Re: [DNSOP] A different question (was Re: Kaminsk… Francis Dupont
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question Ted Lemon
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Ted Lemon
- Re: [DNSOP] A different question Ted Lemon
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question Ted Lemon
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Antoin Verschuren
- Re: [DNSOP] A different question Andrew Sullivan
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] A different question (was Re: Kaminsk… Frederico A C Neves
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Andrew Sullivan
- Re: [DNSOP] A different question Francis Dupont
- Re: [DNSOP] A different question Brian Dickson
- Re: [DNSOP] A different question David Conrad
- Re: [DNSOP] A different question Brian Dickson
- Re: [DNSOP] A different question Paul Wouters
- Re: [DNSOP] A different question David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC Frederico A C Neves
- Re: [DNSOP] A different question Frederico A C Neves
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question Masataka Ohta
- Re: [DNSOP] A different question Matt Larson
- Re: [DNSOP] A different question David Conrad
- Re: [DNSOP] A different question Mark Andrews
- Re: [DNSOP] A different question Matt Larson
- Re: [DNSOP] A different question Frederico A C Neves
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] deprecating dangerous bit patterns an… Peter Koch
- Re: [DNSOP] A different question Dean Anderson
- Re: [DNSOP] A different question Ted Lemon
- Re: [DNSOP] Cache poisoning on DNSSEC Ted Lemon
- Re: [DNSOP] A different question David Conrad
- Re: [DNSOP] A different question Ted Lemon
- [DNSOP] EDNS0, the DO bit and acceptance of respo… Peter Koch
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] deprecating dangerous bit patterns an… Kevin Darcy
- Re: [DNSOP] Cache poisoning on DNSSEC Blacka, David
- Re: [DNSOP] EDNS0, the DO bit and acceptance of r… Mark Andrews
- Re: [DNSOP] A different question Masataka Ohta
- [DNSOP] signed root on a separate infrastructure … Peter Koch
- Re: [DNSOP] Cache poisoning on DNSSEC Larson, Matt
- [DNSOP] spoofing in .com and .net Jim Reid
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Brian Dickson
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC Ralf Weber
- Re: [DNSOP] deprecating dangerous bit patterns an… Joe Abley
- Re: [DNSOP] Cache poisoning on DNSSEC Masataka Ohta
- Re: [DNSOP] Cache poisoning on DNSSEC Ralf Weber
- [DNSOP] The sad fate of T/TCP (Was: deprecating d… Stephane Bortzmeyer
- Re: [DNSOP] The sad fate of T/TCP Florian Weimer
- Re: [DNSOP] The sad fate of T/TCP Stephane Bortzmeyer
- [DNSOP] Anycast TCP DNS stability was Re: Cache p… Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Andrew Sullivan
- Re: [DNSOP] signed root on a separate infrastruct… David Conrad
- Re: [DNSOP] Cache poisoning on DNSSEC Ralf Weber
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Mark Andrews
- Re: [DNSOP] Cache poisoning on DNSSEC Andrew Sullivan
- Re: [DNSOP] The sad fate of T/TCP (Was: deprecati… Francis Dupont
- Re: [DNSOP] Cache poisoning on DNSSEC Dean Anderson
- Re: [DNSOP] Cache poisoning on DNSSEC Brian Dickson
- Re: [DNSOP] Cache poisoning on DNSSEC Brian Dickson
- Re: [DNSOP] Cache poisoning on DNSSEC Andrew Sullivan
- [DNSOP] draft-ietf-dnsop-parroot-00 (Was: A diffe… Stephane Bortzmeyer
- Re: [DNSOP] Cache poisoning on DNSSEC Paul Wouters
- Re: [DNSOP] Cache poisoning on DNSSEC bmanning
- Re: [DNSOP] Cache poisoning on DNSSEC bmanning
- Re: [DNSOP] Cache poisoning on DNSSEC Mark Andrews
- Re: [DNSOP] Cache poisoning on DNSSEC Mark Andrews
- Re: [DNSOP] Cache poisoning on DNSSEC Mark Andrews
- Re: [DNSOP] Cache poisoning on DNSSEC bmanning
- Re: [DNSOP] Cache poisoning on DNSSEC Mark Andrews
- Re: [DNSOP] Anycast was Re: Cache poisoning on DN… Dean Anderson
- Re: [DNSOP] Anycast was Re: Cache poisoning on DN… Ralf Weber
- Re: [DNSOP] Anycast was Re: Cache poisoning on DN… Dean Anderson
- Re: [DNSOP] Anycast was Re: Cache poisoning on DN… Joe Abley
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Joe Abley
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Danny McPherson
- Re: [DNSOP] Anycast was Re: Cache poisoning on DN… Joao Damas
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Joe Abley
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Danny McPherson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Mark Andrews
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Kevin Darcy
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Danny McPherson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Danny McPherson
- [DNSOP] trolls (Re: Reflectors are Evil was Re: A… Paul Vixie
- Re: [DNSOP] trolls (Re: Reflectors are Evil was R… Paul Vixie
- Re: [DNSOP] trolls (Re: Reflectors are Evil was R… Dave CROCKER
- Re: [DNSOP] trolls (Re: Reflectors are Evil was R… Danny McPherson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… David W. Hankins
- Re: [DNSOP] Reflectors are Evil was Re: Anycast w… Dean Anderson