Return-Path: X-Original-To: ietfarch-namedroppers-archive-gleetwall6@core3.amsl.com Delivered-To: ietfarch-namedroppers-archive-gleetwall6@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 66B453A6A5E; Tue, 22 Jul 2008 12:07:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.419 X-Spam-Level: X-Spam-Status: No, score=-2.419 tagged_above=-999 required=5 tests=[AWL=0.180, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jQvmyGyYgUOS; Tue, 22 Jul 2008 12:07:14 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 453453A6982; Tue, 22 Jul 2008 12:07:14 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1KLN5s-0005TQ-Gv for namedroppers-data@psg.com; Tue, 22 Jul 2008 19:00:16 +0000 Received: from [2001:4f8:3:bb:230:48ff:fe5a:2f38] (helo=nsa.vix.com) by psg.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from ) id 1KLN5o-0005T1-Nh for namedroppers@ops.ietf.org; Tue, 22 Jul 2008 19:00:14 +0000 Received: from nsa.vix.com (localhost [127.0.0.1]) by nsa.vix.com (Postfix) with ESMTP id 9D146A1022 for ; Tue, 22 Jul 2008 19:00:00 +0000 (UTC) (envelope-from vixie@nsa.vix.com) From: Paul Vixie To: namedroppers@ops.ietf.org Subject: please adopt http://tools.ietf.org/html/draft-vixie-dnsext-dns0x20 X-Mailer: MH-E 8.0.3; nil; GNU Emacs 22.2.1 Date: Tue, 22 Jul 2008 19:00:00 +0000 Message-ID: <48935.1216753200@nsa.vix.com> MIME-Version: 1.0 X-Vix-MailScanner-Information: Please contact the ISP for more information X-MailScanner-ID: 9D146A1022.F0177 X-Vix-MailScanner: Found to be clean X-Vix-MailScanner-From: vixie@vix.com Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-ID: please adopt http://tools.ietf.org/html/draft-vixie-dnsext-dns0x20 as a working group document. note that this technique was told to me by david dagon fully three days before dan kaminsky told me about "the vulnerability" and as such, there is no causal relationship between this document and those events. also note that i have been running this in production without any errors or code changes for about the last four months. finally, note that Unbound also implements this feature, but hasn't enabled it by default (yet?) -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: