oss-security - Re: Root name server changes -> bind

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 21 May 2008 11:48:46 -0800
From: Jonathan Smith <smithj@...ethemallocs.com>
To: oss-security@...ts.openwall.com
Subject: Re: Root name server changes -> bind

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marcus Meissner wrote:
| 	The security consequences of obscure DNS root server usage are
obvious, IMHO.
| 	You might want to consider security updates to the bind package with
an updated
| 	root.hint file. (Since the story is on Slashdot, it is as public as
it can get;
| 	thus I use the regular channel for this request.)

Why did ICANN allow the old IP address to be taken by an untrusted
party? It would seem that IPs formerly used by root DNS servers should
be permanently retired to prevent just this sort of thing.

	smithj

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEARECAAYFAkg0fJ4ACgkQCG91qXPaRenl1QCfWEVV3nZ7s2J1AKVO23F7CQ2l
uxcAoKp9TR5X4e/hcc5sz1o+bpNVoAla
=ZYQf
-----END PGP SIGNATURE-----

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.