From owner-freebsd-stable@FreeBSD.ORG Tue Jul 30 13:44:16 2013 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id AE2EFFE9 for ; Tue, 30 Jul 2013 13:44:16 +0000 (UTC) (envelope-from ronald-freebsd8@klop.yi.org) Received: from smarthost1.greenhost.nl (smarthost1.greenhost.nl [195.190.28.81]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 6DBC22492 for ; Tue, 30 Jul 2013 13:44:16 +0000 (UTC) Received: from smtp.greenhost.nl ([213.108.104.138]) by smarthost1.greenhost.nl with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.69) (envelope-from ) id 1V4ADe-0004eR-2t; Tue, 30 Jul 2013 15:44:06 +0200 Received: from [81.21.138.17] (helo=ronaldradial.versatec.local) by smtp.greenhost.nl with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.72) (envelope-from ) id 1V4ADe-00040Z-FL; Tue, 30 Jul 2013 15:44:06 +0200 Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes To: "Mehmet Erol Sanliturk" , "Daniel Kalchev" Subject: Re: Bind in FreeBSD, security advisories References: <1375186900.23467.3223791.24CB348A@webmail.messagingengine.com> <51F7B5C7.6050008@digsys.bg> <51F7C07C.9060606@digsys.bg> Date: Tue, 30 Jul 2013 15:44:04 +0200 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: "Ronald Klop" Message-ID: In-Reply-To: <51F7C07C.9060606@digsys.bg> User-Agent: Opera Mail/12.16 (Win32) X-Authenticated-As-Hash: 5a5bc696c05b24d66fef48d694aeed0652e57d03 X-Virus-Scanned: by clamav at smarthost1.samage.net X-Spam-Level: / X-Spam-Score: 0.8 X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50 autolearn=disabled version=3.3.1 X-Scan-Signature: 3b058867a8808b2a73617ccb478d635a Cc: freebsd-stable X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jul 2013 13:44:16 -0000 On Tue, 30 Jul 2013 15:32:44 +0200, Daniel Kalchev wrote: > > On 30.07.13 16:13, Mehmet Erol Sanliturk wrote: >> >> >> >> On Tue, Jul 30, 2013 at 8:47 AM, Daniel Kalchev > > wrote: >> >> >> Going that direction, we should consider Comrade Stalin's maxim >> "FreeBSD exists, there are problems, here is the solution -- no >> FreeBSD, no problems!" :-) >> >> Daniel >> >> >> >> >> Then , there exists a new problem : >> >> >> "There is no FreeBSD ..." > > We already know Comrade Stalin's solution had... bugs. Not before > millions parted with their lives... > > When/if we remove BIND from FreeBSD, we might find out whether that > solution has bugs, or not. Not until then, though. > > Back to the topic :) > > My take on this is that removing BIND from the base today is.. > irresponsible. First, most who use FreeBSD expect an DNS server to be > readily available. Interesting. What are your statistics of 'most' based on? Ronald. > Some people would just avoid to use any ports etc. > BIND in base is well tested and known evil. If we are ever to replace it > with something else, that something else has to prove itself - > demonstrate that it is at least as good as BIND -- in the base system. > In practice, not in theory. > > This is very much an situation like replacing gcc with clang/llvm. > However, in the case of BIND we have no licensing problems, stability > problems, performance problems etc --- just concerns that BIND generates > many SAs -- which might be actually good indicator, as it demonstrates > that BIND is worked on. > > I personally see no reason to remove BIND from base. If someone does not > want BIND in their system, they could always use the WITHOUT_BIND build > switch. > > Daniel > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"