DNSSEC changes - does Freesco need any patch?

Support section for FREESCO v0.4.x

DNSSEC changes - does Freesco need any patch?

Postby PurpleMeanie » Tue Apr 13, 2010 6:46 am

Just a quickie question to the experts...

http://www.theregister.co.uk/2010/04/13/dnssec/
Reading this article on the new DNSSEC changes coming in May, will Freesco need any kind of patch? Or is this not relevant to Freesco?

Only asking as it does fail the test:
http://labs.ripe.net/content/testing-yo ... ize-issues
https://www.dns-oarc.net/oarc/services/replysizetest
User avatar
PurpleMeanie
Junior Member
 
Posts: 34
Joined: Tue Apr 22, 2003 10:05 pm
Location: Brighton, UK

Re: DNSSEC changes - does Freesco need any patch?

Postby Lightning » Tue Apr 13, 2010 11:31 pm

This subject really has a LOT of gray area and there is no clear cut answer. It shows that both EDNS and DNSSEC are both enabled. But it also says it is only potentially a problem if the announced buffer size is greater than the measured buffer size. BUT it continues with the size difference should be greater than 300 bytes to be a real problem and the actual size difference is only 257 bytes with the JAVA test and 253 bytes using the Linux dig test.

So it all ends up running you around in a circle and no real answer to which even I could come up with a clear cut answer to give to you. So I guess we will find out the truth soon enough.
If you are afraid that you might make a mistake. The chances are high that you will never learn anything.
User avatar
Lightning
FREESCO GOD !!
 
Posts: 12080
Joined: Wed Nov 14, 2001 6:50 am
Location: Oregon, USA


Return to FREESCO Support for v0.4.x

Who is online

Users browsing this forum: No registered users and 3 guests

cron