On Aug 3, 2012, at 11:34 AM, paul vixie wrote:

> it's not about TXT and it never was about ANY.

Agreed, these are just what we tend to see the attackers using quite a bit - 
public keys stored as TXT records, for example.  The point is that with DNSSEC, 
there's even less need to attempt to bother with query selectivity.

This isn't an argument against DNSSEC, mind.

-----------------------------------------------------------------------
Roland Dobbins <[email protected]> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton

_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to