Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Mar 2015 12:00:03 -0700
From:      jungle Boogie <jungleboogie0@gmail.com>
To:        Chris Stankevitz <chrisstankevitz@gmail.com>
Cc:        freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: FreeBSD recommends not using base unbound for an authoritative server
Message-ID:  <CAKE2PDvy7CRW_O_XR9oHtHBe8gO9THVGGz1BdN6dPbZSGk8etA@mail.gmail.com>
In-Reply-To: <CAPi0psuy1swnCB%2B5NQbPrAAA=E3E377CcOPvvez%2Be4Ze6zuVZQ@mail.gmail.com>
References:  <CAPi0pssPrcJgF71AvQ-M1RZt=%2Btv=6FTGtwhi9_bX6-Q-7b7cQ@mail.gmail.com> <5508B8EB.3050907@gmail.com> <CAPi0psuy1swnCB%2B5NQbPrAAA=E3E377CcOPvvez%2Be4Ze6zuVZQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi Chris,
On 18 March 2015 at 08:32, Chris Stankevitz <chrisstankevitz@gmail.com> wrote:
> On Tue, Mar 17, 2015 at 4:29 PM, Jungle Boogie <jungleboogie0@gmail.com> wrote:
>> I use unbound from base _only_ at home for recursive DNS stuff. If I were to
>> make it authoritative for a domain, I'd use ports or packages because they
>> are updated more frequently over what's it base.
>
> Mr. Boogie,
>
> Thank you for your reply.  Are you referring to security?  Is this the
> is a correct interpretation of what you are saying:
>
> "In general, the FreeBSD base software is untrustworthy because it is
> infrequently updated.  Someone who is interested in security should
> avoid the FreeBSD base packages and use ports wherever possible."
>

No, I wouldn't say untrustworthy nor am I referring to trust at all.

If you install unbound from ports/pkg, you'll have unbound (or
anything else) updated more frequently over what's in freeBSD base.

>From here, we can see how frequently is updated:
https://www.freshports.org/dns/unbound/

You may not care about frequent updates, so that's something you'll
need to consider.

> Thank you,
>
> Chris



-- 
-------
inum: 883510009027723
sip: jungleboogie@sip2sip.info
xmpp: jungle-boogie@jit.si



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAKE2PDvy7CRW_O_XR9oHtHBe8gO9THVGGz1BdN6dPbZSGk8etA>