The following message is a courtesy copy of an article
that has been posted to bit.listserv.ibm-main as well.


[EMAIL PROTECTED] (Patrick O'Keefe) writes:
> I don't think it's "out of ignorance" at all.  As I understand it, the
> whole concept of DNS lookups is built around recursion - "I don't 
> know, but know does".  The only 2 real choices are "I'll go ask
> him" or "You go ask him".  (Maybe only the first is considered
> recursive.  I don't know DNS processing that well.  I'm not even 
> sure the 2nd option is part of standard DNS processing.)

the domain name infrastructure is sort of a combination of a hierarchy
and mesh. both clients and servers can point to any place in the
infrastructure (servers point to other places in the infrastructure for
information that they aren't the authoritative server).  both clients
and servers may cache information from other places in the
infrastructure. Lists of other servers to ask (used by both clients and
servers) frequently have a minimum of two ... but sometimes can have
dozens (somewhat blurs the distinction between what is client and what
is server).

most ISP clients get automatically setup to point at the DNS servers
run by that ISP. For something a little different, here is a service
that is advertising itself as a preferred alternative to default
ISP DNS servers ... goes into some detail about DNS as part of
supporting their claims as to being "better":
http://www.opendsn.com/

slightly older post with several references about the domain name
infrastructure vulnerabiilty
http://www.garlic.com/~lynn/2008j.html#87 CLIs and GUIs

also mentions that the inventor of DNS having earlier done a stint at
the science center
http://www.garlic.com/~lynn/subtopic.html#545tech

recent post on the subject in a.f.c ng
http://www.garlic.com/~lynn/2008k.html#78 Secure64 Develops First Automated 
DNSSEC Signing Application to Help Secure the Internet Worldwide

and repeat in thread in comp.arch
http://www.garlic.com/~lynn/2008k.html#79 Larrabee details: Yes, it is based on 
the Pentium. :-)

above mentions that one of the founders of Secure64 had also worked
on 801/risc
http://www.garlic.com/~lynn/subtopic.html#801

however, it doesn't mention that they had also earlier been responsible
for dual-address space mode on 3033.

-- 
40+yrs virtualization experience (since Jan68), online at home since Mar70

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to