I don't know that I'd be too concerned about having all your thunder
stolen... I'm reminded of the 5th USENIX UNIX Security Symposium.
>There's a MUCH easier way of caching RR's. As long as the nameserver is
>older than 4.9.5+P1 which is > 90% of the net. I explained it in a paper I
>wrote last year I sent it off to Paul Vixie to get a reply (and possibly a
>patch) to the problem. The problem is basically this: BIND will cache
>ANYTHING that it gets in the return packet. This advisory was
>partially leaked to nanog and is known to have been leaked to a number
>of other people. Here it is from my original advisory (complete with
>spelling and grammar mistakes):
... so how is all of this different from Bellovin's original 1990
paper?
<URL:http://penguin.cso.uiuc.edu/~lemson/securitysymp/session7.html>
<URL:http://www.usenix.org/publications/library/proceedings/security95/bellovin.html>