3 ms·
(A) This days Cloudflare can sustain all the DNS amplifications without even blinking. This work doesn't help us in any way on the DoS front. This work helps sm
by majke 8y ago
(A) This days Cloudflare can sustain all the DNS amplifications without even blinking. This work doesn't help us in any way on the DoS front. This work helps smaller players that don't have spare network capacity. If anything, making amplification attacks harder _reduces_ our benefits.
(B) You are free to run ANY as you like on your domain. For domains you own, this RFC doesn't change anything.
(C) Would you advocate for responding to AXFR / zone transfers? There generally is consensus that allowing enumeration is not desired.