This is something djbdns excelled at in it's initial implementation. DJB, always impressive. These vulnerabilities don't seem all that hard to fix. This also po

This is something djbdns excelled at in it's initial implementation. DJB, always impressive. These vulnerabilities don't seem all that hard to fix. This also points out why DNSSec is so important IMO. I know many don't see as much value in it, but it can be very useful for defending against inauthentic records. It's a big reason why I've been working on TRust-DNS. On a separate note; I'd love feedback on these areas of my code if anyone would care to... In TRust-DNS, at least to my best ability, I implemented them in these two locations: randomized port (UDP only): https://github.com/bluejekyll/trust-dns/blob/master/client/src/udp/udp_stream.rs#L175 https://github.com/bluejekyll/trust-dns/blob/master/client/s... randomized msg id (TCP & UDP): https://github.com/bluejekyll/trust-dns/blob/master/client/src/client/client_future.rs#L200 https://github.com/bluejekyll/trust-dns/blob/master/client/s...