It's interesting to contrast Paul Wouters' dismissal of source port randomization with the conversation on the Ubuntu mailing list with Martin Pitt, the systemd

It's interesting to contrast Paul Wouters' dismissal of source port randomization with the conversation on the Ubuntu mailing list with Martin Pitt, the systemd developer and Ubuntu systemd maintainer whose announcement precipitated M. Wouters' critique. > > source port randomization is enabled by default to further protect against DNS spoofing attacks. > [...] source port randomization is pretty useless [...] -- Paul Wouters, https://lists.dns-oarc.net/pipermail/dns-operations/2016-June/014964.html https://lists.dns-oarc.net/pipermail/dns-operations/2016-Jun... > ATM resolved uses randomized ID fields [...]. It does not use source port randomization though, -- Martin Pitt, https://lists.ubuntu.com/archives/ubuntu-devel/2016-May/039364.html https://lists.ubuntu.com/archives/ubuntu-devel/2016-May/0393... > I'm concerned what this says about the maturity of the project: djbdns introduced source port randomization back in 1999. -- Seth Arnold, https://lists.ubuntu.com/archives/ubuntu-devel/2016-May/039370.html https://lists.ubuntu.com/archives/ubuntu-devel/2016-May/0393...