3 ms·
Instead of http://asdoguhwrouyh http://asdoguhwrouyh, they could probe something like http://asdoguhwrouyh.google http://asdoguhwrouyh.google or anything else i
by majewsky 6y ago
Instead of http://asdoguhwrouyh http://asdoguhwrouyh, they could probe something like http://asdoguhwrouyh.google http://asdoguhwrouyh.google or anything else in a zone owned by them, so the uncachable traffic would hit only their authoritative name servers and not the root servers.
- warp 6y agoBut then a lying DNS server could easily identify those, and NOT lie about http://*.google http://*.google -- the reason these requests are entirely random domain names is so they're not easily recognized as probes.
- xnyanta 6y agoExcept that the queries are already totally identifiable as probes in their current form, which is demonstrated in the article.
- JdeBP 6y ago... only when the delegation for google. is cached.