From owner-freebsd-hackers@FreeBSD.ORG  Tue Sep 16 16:56:03 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6C26516A4C2
	for <freebsd-hackers@freebsd.org>;
	Tue, 16 Sep 2003 16:56:03 -0700 (PDT)
Received: from harmony.village.org (rover.bsdimp.com [204.144.255.66])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 622B043F75
	for <freebsd-hackers@freebsd.org>;
	Tue, 16 Sep 2003 16:56:00 -0700 (PDT)	(envelope-from imp@bsdimp.com)
Received: from localhost (warner@rover2.village.org [10.0.0.1])
	by harmony.village.org (8.12.9/8.12.3) with ESMTP id h8GNtvTX086313;
	Tue, 16 Sep 2003 17:55:58 -0600 (MDT)
	(envelope-from imp@bsdimp.com)
Date: Tue, 16 Sep 2003 17:55:58 -0600 (MDT)
Message-Id: <20030916.175558.10083602.imp@bsdimp.com>
To: jdp@polstra.com
From: "M. Warner Losh" <imp@bsdimp.com>
In-Reply-To: <XFMail.20030916145304.jdp@polstra.com>
References: <3F673E27.29338.6E87ACC@localhost>
	<XFMail.20030916145304.jdp@polstra.com>
X-Mailer: Mew version 2.2 on Emacs 21.3 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: freebsd-hackers@freebsd.org
cc: dan@langille.org
cc: cliftonr@lava.net
Subject: Re: Any workarounds for Verisign .com/.net highjacking?
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Sep 2003 23:56:03 -0000

I think we should put a filter for this nonsense into the base
system.  Hack the resolve to filter out the adddress, and hack bind to
filter it out too.  that way we can leverage our position in the name
servers in the world to do something about this BS.

Warner