Re: OT: Re: WANAL (Re: What could have been done differently?)

2003-02-04 Thread Scott Francis
On Mon, Feb 03, 2003 at 11:27:46AM +0100, [EMAIL PROTECTED] said: --On Tuesday, January 28, 2003 18:06:47 -0800 Scott Francis [EMAIL PROTECTED] wrote: I'm sure they'll move to a newer version when somebody on the team gets a chance to give it a thorough code audit, and run it

Re: OT: Re: WANAL (Re: What could have been done differently?)

2003-02-03 Thread Måns Nilsson
--On Tuesday, January 28, 2003 18:06:47 -0800 Scott Francis [EMAIL PROTECTED] wrote: I'm sure they'll move to a newer version when somebody on the team gets a chance to give it a thorough code audit, and run it through sufficient testing prior to release. The -current tree now is at BIND

OT: Re: WANAL (Re: What could have been done differently?)

2003-01-28 Thread Rafi Sadowsky
## On 2003-01-28 17:49 - Paul Vixie typed: PV PV In any case, all of these makers (including Microsoft) seem to make a very PV good faith effort to get patches out when vulnerabilities are uncovered. I PV wish we could have put time bombs in older BINDs to force folks to upgrade, PV but

Re: OT: Re: WANAL (Re: What could have been done differently?)

2003-01-28 Thread Paul Vixie
What do you think of OpenBSD still installing BIND4 as part of the default base system and recommended as secure by the OpenBSD FAQ ? (See Section 6.8.3 in http://www.openbsd.org/faq/faq6.html#DNS ) i think that bind4 was relatively easy for them to do a format string audit on, and that

Re: OT: Re: WANAL (Re: What could have been done differently?)

2003-01-28 Thread Mike Lewinski
On 1/28/03 11:57 AM, Paul Vixie [EMAIL PROTECTED] wrote: What do you think of OpenBSD still installing BIND4 as part of the default base system and recommended as secure by the OpenBSD FAQ ? (See Section 6.8.3 in http://www.openbsd.org/faq/faq6.html#DNS ) i think that bind4 was

Re: OT: Re: WANAL (Re: What could have been done differently?)

2003-01-28 Thread Scott Francis
On Tue, Jan 28, 2003 at 08:53:59PM +0200, [EMAIL PROTECTED] said: [snip] Hi Paul, What do you think of OpenBSD still installing BIND4 as part of the default base system and recommended as secure by the OpenBSD FAQ ? (See Section 6.8.3 in http://www.openbsd.org/faq/faq6.html#DNS ) OpenBSD