Re: [dns-wg] New on RIPE Labs: NXNSAttack: Upgrade Resolvers to Stop New Kind of Random Subdomain Attack

Moin! On 20 May 2020, at 16:43, Mirjam Kuehne wrote:

This article by Petr Špaček of CZ.NIC describes a newly discovered DNS protocol vulnerability that affects all recursive DNS resolvers. That is not exactly true and while I normally would not have bothered to correct that, but I had to answer quite a few customer questions yesterday, so here we are. Akamai/Nominum Cacheserve and Akamai/Xerocole AnswerX are not affected by this. We had limits in the software for this in the Cacheserve case from day one. Would appreciate if you could correct that in the article.

So long -Ralf —-- Ralf Weber