netsec-sig - [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?
Subject: Internet2 Network Security SIG
List archive
- From: Michael H Lambert <>
- To: Steven Wallace <>
- Cc: , NTAC <>, Kim Milford <>,
- Subject: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?
- Date: Fri, 3 Nov 2017 11:25:47 -0400
- Dkim-filter: OpenDKIM Filter v2.11.0 mailer2.psc.edu vA3FPxGm019373
- Ironport-phdr: 9a23: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
> On 2 Nov 2017, at 11:00, Steven Wallace
> <>
> wrote:
>
> At some point the resolver is going to want to query the TLD server for
> .com, and ultimately a DNS root server. If the university only has access
> to AWS (remember all Internet access is down), unless the university is
> hosting a local root and .TLD (which is an option), the dedicated
> connection to AWS is going to become useless.
Would it work to have an LTE-attached recursive resolver in a situation like
this? I would imagine it would make sense to have it enabled by hand.
Michael
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, (continued)
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, David Farmer, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, Steven Wallace, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, Paul Howell, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, David Farmer, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, David Farmer, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, Steven Wallace, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, David Farmer, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, Steven Wallace, 11/03/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, David Farmer, 11/03/2017
- Message not available
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, John Kristoff, 11/05/2017
- Re: [Security-WG] Re: [NTAC] DNS Serving Stale to the rescue?, Paul Howell, 11/06/2017
- Re: [Security-WG] [NTAC] DNS Serving Stale to the rescue?, Steven Wallace, 11/03/2017
Archive powered by MHonArc 2.6.19.