hextraorinary

4 ms·

1. 1.▲
   by hextraorinary 14y ago

   Someone is paying attention. ;) The tld server ip's are "hardcoded" into the resolver application and revised as needed from the root.zone.gz file periodically- these servers do not change very often. The application is just a simple lexer
2. 2.▲
   by hextraorinary 14y ago

   There's a solution to all this, where you will always get the right response, and it even obviates the need for DNSSEC or DNSCurve. And that is, write your own resolver that only sends nonrecursive queries to authoritative nameservers. If
3. 3.▲
   by hextraorinary 14y ago

   That's one benefit of DNSSEC. If an ISP adopts it, including NSEC, they can't also do NXDOMAIN spoofing with their DNS servers. Mutually exclusive. But for ISP's that insist on doing this, there are various workarounds besides the one men