Skip to Content.
Sympa Menu

netsec-sig - Re: [Security-WG] [NTAC] DNS Serving Stale to the rescue?

Subject: Internet2 Network Security SIG

List archive

Re: [Security-WG] [NTAC] DNS Serving Stale to the rescue?


Chronological Thread 
  • From: Steven Wallace <>
  • To:
  • Cc: NTAC <>, Kim Milford <>,
  • Subject: Re: [Security-WG] [NTAC] DNS Serving Stale to the rescue?
  • Date: Fri, 3 Nov 2017 11:31:31 -0400
  • Ironport-phdr: 9a23:jrdHvxxpN7YojADXCy+O+j09IxM/srCxBDY+r6Qd2+4UIJqq85mqBkHD//Il1AaPBtSLraocw8Pt8InYEVQa5piAtH1QOLdtbDQizfssogo7HcSeAlf6JvO5JwYzHcBFSUM3tyrjaRsdF8nxfUDdrWOv5jAOBBr/KRB1JuPoEYLOksi7ze6/9pnQbglSmDaxfa55IQmrownWqsQYm5ZpJLwryhvOrHtIeuBWyn1tKFmOgRvy5dq+8YB6/ShItP0v68BPUaPhf6QlVrNYFygpM3o05MLwqxbOSxaE62YGXWUXlhpIBBXF7A3/U5zsvCb2qvZx1S+HNsDtU7s6RSqt4LtqSB/wiScIKTg58H3MisdtiK5XuQ+tqwBjz4LRZoyeKfhwcb7Hfd4CRWRPXdpeWCNcDI2ybYQBEeQBMP1Xr4XholsDtweyCRWuCe7p1zRGhmX23ao/0+k5DA/GwBIvH8wQv3TSsd76NL0dUeSxzKbS0TrMce5d1DDm6IjTfBEsuvCMXa9qfcXP1EYvChrIg1ONooLrODOV0/4Cs2md7+d4W+KvjHQnpxttrTiow8chjJTCiIENyl3c6yl13Jo5KcC9RUJmYtOrDphduiSUN4t4Xs8uX2RltDg0x7ADvJO2fDUGxZI6zBDFcfOHaZKH4hf7WeaRPzh4gHVldaq6hxmo8EigzvfwWdWo0FlWtCZFncPMtnYK1xPP8MSHS+Z98l2/1jmSygDf8uBEIUYqmqrHM5Mt3KI8moYOvUnGAyP7m1v5gayTe0Uq9Oik9/jrb7D4qpKSMoJ5jwHzPrk2lsy6G+s4MwwOX2aB+eS70b3u5Vb5QK5Ej/Atk6nZrYrWKtoGqa6kGwNVyJos6w6jDze619QVhX8HLE5fdx2blIXpP1DOIOvkDfeknVigijZrx/baPrL/GJXNKGbMkKv/cbpn9UFT1Rczx8hF551IErEBPO7zWkjpudzDEBA2LxG0w/zmCNVh1oISQGyOAqCCPaPWsF+I/f4vI/KSaIMPuTb9LeQl6OD0jX8/h1AdYbel0YEJZ3+lA/Q1a3meNGHhicobEHsb+xUxZO3slFCYVzNPPTC/U79vyCs8DdedEYrdS4blv7WF2C6wE9UCfXtZIlGRV3rkatPXCL83dCuOL5o5wXQ/Xr+7RtpkjEn2uQ==
I don’t think the university could afford that data bill :-)



> On Nov 3, 2017, at 11:25 AM, Michael H Lambert
> <>
> wrote:
>
>> On 2 Nov 2017, at 11:00, Steven Wallace
>> <>
>> wrote:
>>
>> At some point the resolver is going to want to query the TLD server for
>> .com, and ultimately a DNS root server. If the university only has access
>> to AWS (remember all Internet access is down), unless the university is
>> hosting a local root and .TLD (which is an option), the dedicated
>> connection to AWS is going to become useless.
>
> Would it work to have an LTE-attached recursive resolver in a situation
> like this? I would imagine it would make sense to have it enabled by hand.
>
> Michael
>
>

Attachment: smime.p7s
Description: S/MIME cryptographic signature


Archive powered by MHonArc 2.6.19.

Top of Page