Subject: Re: increasing DNS message entropy, a solution for NATs
From: "Roy Arends" <[email-masked]>
To: Joe Abley <[email-masked]>
Cc: [email-masked], Alex Bligh <[email-masked]>, [email-masked]
Date: Mon, 21 Jul 2008 23:32:44 +0200
List-Id: <namedroppers.ops.ietf.org>

Joe Abley <[email-masked]> wrote on 07/21/2008 11:16:07 PM:

> On 21 Jul 2008, at 17:09, Roy Arends wrote:
> 
> > At a single point in time,
> 
> There is no single point of time to do two things, in practice (at 
> least, in general).

Joe, you're splitting hairs here.

> > issue two queries with the same question
> > section. For more entropy, randomize everything else: source address,
> > destination address, query ID, source port.
> 
> So, considering there are well-documented examples of TLD, root, and 
> other DNS infrastructure which will, by design, respond with different 
> answers to these two queries, what conclusions should such a resolver 
> draw from the observed incoherence?

if different, use either, cache neither.

Roy

--
to unsubscribe send a message to [email-masked] with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>