HNGlance

Top Best New Show

DNS SecURItY via Leet QueRieS [pdf]

https://astrolavos.gatech.edu/articles/increased_dns_resistance.pdf

by nurple • 2 years ago

2 1 2 years ago

AS

astrolavos.gatech.edu

Related Stories

Loading related stories...

Comments

1

nurple• 2 years ago

Apparently, some DNS query implementations use an "0x20 bit encoding" to add additional random bits to the query ID for poisoning attack resistance.

I've been trying to track down a DNS latency issue in my network and noticed a device doing this and initially thought it was malware, but there is an RFC[0](though expired), and Google announced that they had implemented this for queries from their public DNS servers in 2023[1].

0. https://datatracker.ietf.org/doc/html/draft-vixie-dnsext-dns...

1. https://groups.google.com/g/public-dns-discuss/c/KxIDPOydA5M

Source preview

astrolavos.gatech.edu

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms