Skip to Content.
Sympa Menu

netsec-sig - Re: [Security-WG] DNS Location record question

Subject: Internet2 Network Security SIG

List archive

Re: [Security-WG] DNS Location record question


Chronological Thread 
  • From: Jason Zurawski <>
  • To: Paul Howell <>
  • Cc:
  • Subject: Re: [Security-WG] DNS Location record question
  • Date: Tue, 05 Sep 2017 09:50:12 -0400
  • Ironport-phdr: 9a23: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

+1

Hiding this info produces no security gain, and only causes annoyances for those trying to eliminate performance issues and/or create innovative things. 

-jason

Steven Wallace wrote:
I use them from time to time (visual traceroute)

I suspect researchers may as well. IMO, the security list is probably not the best place to ask if they’re used.

The LOC below record lists 10,000 meters as its horizontal precision, however the coordinates' precision is about 100 meters.

IMO, leave them, but knock the precision of the lat/long down to .01 rather than .001.

ssw


On Sep 5, 2017, at 9:26 AM, Paul Howell  wrote:

Hi,

Currently Internet2 publishes location information for each router in the respective DNS records.  Here’s an example:

rtsw.newy32aoa.net.internet2.edu. 3600 IN LOC	40 43 12.248 N 74 0 18.716 W 0.00m 1m 10000m 10m

Would anyone that is using these records please message me?    If they are no longer needed, we may remove them.

Regards,
Paul







Archive powered by MHonArc 2.6.19.

Top of Page