Re: [dns-operations] EDNS with IPv4 and IPv6 (DNSSEC or large answers)

2014-09-24 Thread Franck Martin
On Sep 23, 2014, at 2:34 PM, Roland Dobbins rdobb...@arbor.net wrote: On Sep 24, 2014, at 12:16 AM, Florian Weimer f...@deneb.enyo.de wrote: Fragmentation in IPv4 is inherently insecure. Conceptually, yes, it's a Very Bad Idea. But given the realities of the TCP/IP we have, it's

Re: [dns-operations] EDNS with IPv4 and IPv6 (DNSSEC or large answers)

2014-09-24 Thread Roland Dobbins
On Sep 25, 2014, at 1:46 AM, Franck Martin fmar...@linkedin.com wrote: But what about the customers that use recursive nameservers, does it make sense for them to block fragments at the edge and even on the other side of the link at the edge? No, no, no. They'll break the Internet if they do

Re: [dns-operations] DNS-OARC Fall 2014 Workshop - Los Angeles, California, 11th-13th October

2014-09-24 Thread Keith Mitchell
A reminder DNS-OARC's 2014 Fall Workshop and Member AGM will be taking place in Los Angeles, California, USA on the 11th through 13th October, and we are pleased to announce a very strong confirmed agenda at: https://indico.dns-oarc.net//conferenceTimeTable.py?confId=20#all.detailed This will be

Re: [dns-operations] An simple observation

2014-09-24 Thread Ralf Weber
Moin! On 24 Sep 2014, at 18:27, Davey Song songlinj...@gmail.com wrote: Hi everyone, I‘m recently doing a little survey on the penetration of IPv6 in DNS system and it's latent problems. Can you tell me what the problem is? Even if you are on an IPv6 only network your resolver (that you