3 ms·
Aside from the obvious stupidity of the 'established players', i have to say, that is one hell of a bootstraping technique.
by alexandros 18y ago
Aside from the obvious stupidity of the 'established players', i have to say, that is one hell of a bootstraping technique.
- cturner 18y ago> Aside from the obvious stupidity of the 'established players' Surely it's a short-term solution at best? As soon as one bot network is killed like this then another will emerge with more complex (and costly to patch) security measures - ? Wouldn't it be easier to attack it at the DNS management level itself? Model: have a provision for creating a kill list for domain names that extends from ICANN down to the registrars. Would allow ICANN to blacklist certain names.
- alexandros 18y agoWhatever level the nevessary action needed to be performed on, it needed the big boys (and girls) to get involved. And the chance has been lost for this round it seems. Thinking about your solution a bit more though, and it does sound good at first, what happens when the black list starts approaching a material percentage of the total of usable domain names? are we eventually going to blaclist the entire domain-space? This is just another reason why DNS is very, very broken.
- kragen 18y agoWhat do you think a non-broken replacement for DNS would be like?
- alexandros 18y agojust because I mentioned the problem does not mean I have the solution :). If I had to venture a guess, I would say it would look much more like a distributed identity/trust model than the current semi-centralized DNS solution.
- kragen 18y agoI agree that DNS is pretty broken, and it's a really important problem to solve. I was hoping you might have insights on what to do ;)