Re: [DNSOP] Re: Last Call: draft-ietf-dnsop-reflectors-are-evil (Preventing Use of Recursive Nameservers in Reflector Attacks) to BCP

2007-10-01 Thread Mark Andrews
> On Oct 1, 2007, at 7:42 PM, Mark Andrews wrote: > > > > >> As for the TSIG or SIG(0) recommendation, I'm not sure what > >> the numbers are for client support today, but I suspect it's at > >> best an negligible sample. > > > > Well all Windows XP/2003/Vista boxes can be configured to > >

Re: [DNSOP] Re: Last Call: draft-ietf-dnsop-reflectors-are-evil (Preventing Use of Recursive Nameservers in Reflector Attacks) to BCP

2007-10-01 Thread Danny McPherson
On Oct 1, 2007, at 7:42 PM, Mark Andrews wrote: As for the TSIG or SIG(0) recommendation, I'm not sure what the numbers are for client support today, but I suspect it's at best an negligible sample. Well all Windows XP/2003/Vista boxes can be configured to support TSIG, with

Re: [DNSOP] Re: Last Call: draft-ietf-dnsop-reflectors-are-evil (Preventing Use of Recursive Nameservers in Reflector Attacks) to BCP

2007-10-01 Thread Mark Andrews
> As for the TSIG or SIG(0) recommendation, I'm not sure what > the numbers are for client support today, but I suspect it's at > best an negligible sample. Well all Windows XP/2003/Vista boxes can be configured to support TSIG, with free software, if not natively. All Li

Re: [DNSOP] Re: Last Call: draft-ietf-dnsop-reflectors-are-evil (Preventing Use of Recursive Nameservers in Reflector Attacks) to BCP

2007-10-01 Thread Danny McPherson
On Oct 1, 2007, at 1:08 PM, John Kristoff wrote: Since this group can be a bit pedantic about terminology, what Danny is referencing is what I was specifically referring to as "resolvers". I totally made up those four categories for my purposes of describing some of the work we were doing as a

Re: [DNSOP] Re: Last Call: draft-ietf-dnsop-reflectors-are-evil (Preventing Use of Recursive Nameservers in Reflector Attacks) to BCP

2007-10-01 Thread John Kristoff
On Mon, 1 Oct 2007 10:47:44 -0600 Danny McPherson <[EMAIL PROTECTED]> wrote: > Perhaps expanding in the "Problem Description" section > would be beneficial. Something mentioning that Many > SOHO and broadband access devices provide some flavor > of name resolution services (e.g., there are 4 flav

[DNSOP] Re: Last Call: draft-ietf-dnsop-reflectors-are-evil (Preventing Use of Recursive Nameservers in Reflector Attacks) to BCP

2007-10-01 Thread Danny McPherson
On Oct 1, 2007, at 1:52 AM, Stephane Bortzmeyer wrote: On Sun, Sep 30, 2007 at 10:32:39PM -0600, Danny McPherson <[EMAIL PROTECTED]> wrote a message of 51 lines which said: Section 4's reference to BCP 84, in part, creates a false sense of useful action on part of the operator, This could

[DNSOP] Re: Last Call: draft-ietf-dnsop-reflectors-are-evil (Preventing Use of Recursive Nameservers in Reflector Attacks) to BCP

2007-10-01 Thread Stephane Bortzmeyer
On Sun, Sep 30, 2007 at 10:32:39PM -0600, Danny McPherson <[EMAIL PROTECTED]> wrote a message of 51 lines which said: > Section 4's reference to BCP 84, in part, creates a false sense of > useful action on part of the operator, This could be said of all the parts of the I-D which mentions non-