RE: [sitefinder-tech-discuss] followup from 15oct secsac

["Hollenbeck, Scott" <shollenbeck@verisign.com>]

> > > 	Hence benign.  More "prickly" are things like wildcard "A"
> > > 	records.   Ms. Random Disgruntled has zero idea (from the DNS
> > > 	side of the house) what, if any, services may be hanging off
> > > 	the IP address on the other side of that A.  For all she knows,
> > > 	the services can and will change over time...  Was this
> > > 	ambiguity considered as a design goal?
> > 
> > Sadly, I think the design goals for the .com/.net wildcards 
> were very 
> > similar
> > to the design goals for the African Email scams.
> 
> 	I was hoping for a response from the folks at verisign.

Other services as something to be addressed?  Yes -- that's why TCP resets
and ICMP errors are used to reject connection attempts for other services.

-Scott-

----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.elistx.com/unsubscribe>