4 ms·
I'd be happy if DNS and NTP would just get off their butts and switch to TCP. No, DoH doesn't count.
by nubinetwork 4y ago
I'd be happy if DNS and NTP would just get off their butts and switch to TCP. No, DoH doesn't count.
- cjsplat 4y agoWhy would NTP be better with retransmisson of stale packets and go-back-N semantics on drops?
- nubinetwork 4y agoUDP can be spoofed for amplification attacks, and since ISPs won't implement reverse path filtering, the only other option is to get rid of UDP.
- seanhunter 4y agoNormal DNS will switch to TCP for any large request and has done for quite some time.
- noselasd 4y agoUnless you're using the musl libc - which is in heavy use in conteainerized applications
- seanhunter 4y agoOK well if it does zone transfers those are over TCP only and always have been.
- deleted 4y ago[deleted]
- nubinetwork 4y agoThere is more to DNS than just zone transfers...