From owner-freebsd-chat@FreeBSD.ORG  Fri Sep 19 20:47:27 2003
Return-Path: <owner-freebsd-chat@FreeBSD.ORG>
Delivered-To: freebsd-chat@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B484016A4BF
	for <chat@freebsd.org>; Fri, 19 Sep 2003 20:47:27 -0700 (PDT)
Received: from moo.sysabend.org (moo.sysabend.org [66.111.41.70])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D027443FD7
	for <chat@freebsd.org>; Fri, 19 Sep 2003 20:47:24 -0700 (PDT)
	(envelope-from ragnar@sysabend.org)
Received: by moo.sysabend.org (Postfix, from userid 1004)
	id 3918A11E4; Fri, 19 Sep 2003 20:47:24 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
	by moo.sysabend.org (Postfix) with ESMTP
	id 33FB311B9; Fri, 19 Sep 2003 20:47:24 -0700 (PDT)
Date: Fri, 19 Sep 2003 20:47:24 -0700 (PDT)
From: Jamie Bowden <ragnar@sysabend.org>
To: Brett Glass <brett@lariat.org>
In-Reply-To: <4.3.2.7.2.20030919165147.0294fb00@localhost>
Message-ID: <20030919204626.R33621-100000@moo.sysabend.org>
X-representing: Only myself.
X-badge: We don't need no stinking badges.
X-obligatory-profanity: Fuck
X-moo: Moo.
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=X-UNKNOWN
Content-Transfer-Encoding: QUOTED-PRINTABLE
cc: =?X-UNKNOWN?Q?Dag-Erling_Sm=F8rgrav?= <des@des.no>
cc: chat@freebsd.org
Subject: Re: The net fights back
X-BeenThere: freebsd-chat@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Non technical items related to the community
	<freebsd-chat.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-chat>,
	<mailto:freebsd-chat-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-chat>
List-Post: <mailto:freebsd-chat@freebsd.org>
List-Help: <mailto:freebsd-chat-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-chat>,
	<mailto:freebsd-chat-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 20 Sep 2003 03:47:27 -0000

On Fri, 19 Sep 2003, Brett Glass wrote:

> At 09:06 AM 9/19/2003, Dag-Erling Sm=F8rgrav wrote:
>
> >At least one major .no ISP have patched their name server to disregard
> >Verisign's wildcard entry
>
> We firewalled their addresses immediately and are installing the
> latest BIND 9 on all our servers to block their mischief.
>
> I'd love to see a version of BIND with a hack to block top level
> wildcards go into the next releases on the -CURRENT and -STABLE
> branches.

This would break other TLDs that have validly been using wildcards since
inception.  There is no violation of RFC on Verisign's part, merely public
trust.

Jamie Bowden

--=20
"It was half way to Rivendell when the drugs began to take hold"
Hunter S Tolkien "Fear and Loathing in Barad Dur"
Iain Bowen <alaric@alaric.org.uk>