On Aug 19, 2008, at 8:15 PM, Dean Anderson wrote:
A verifying DNSSEC cache can be poised with bad glue records using the poisoning attack, with only a slight change to the Kaminsky software.
Do you mean that it can be convinced that an answer is valid when it is not?
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
