10 Jan
2013
10 Jan
'13
1:08 a.m.
One is a stunt rDNS server that synthesizes the records on demand. (Bonus points for doing DNSSEC, too. Double bonus points for doing NSEC3.)
NSEC3 is a waste of time in ip6.arpa or any similarly structured zone so -1000000 for doing NEC3 and effectively doing a DoS attack against yourself and the client resolvers.
I know, but figuring out on the fly what order the hashes are would be quite a coding feat. R's, John