3 ms·

So what is your alternative for solving DNS poisoning?

• tptacek 12y ago
  Exactly the same thing we do today! Assume the DNS is poisoned, and delegate security to higher layers so that there's not much point in bothering to poison it. Literally, my answer is DO NOTHING NEW.
  • ars 12y ago
    > delegate security to higher layers so that there's not much point in bothering to poison it. Literally, my answer is DO NOTHING NEW. That would not help my server - the DNS poisoning is acting like a DDOS. Sure the random victims know they are on the wrong page, but it doesn't help my server for them to know that.
    • yuhong 12y ago
      Wonder if DNSCurve would solve that.
    • tptacek 12y ago
      Isn't exactly the same form of DDOS --- not even reaching how many simpler ways there are to DDOS you --- available in DNSSEC, by injecting non-validating records?
      • deleted 12y ago
        [deleted]
      • xorcist 12y ago
        Not exactly, as you don't cache non validating records (for very long).