News for hackers. Stuff that matters.

A comment on RFC8482 – Saying Goodbye to ANY. Parent comment

Re:RFC8482 – Saying Goodbye to ANY by j0057 on Friday March 15, 2019 @02:27PM (#19402692)
Limiting ANY queries to just TCP would have been a reasonable middle ground, but now Cloudflare has a cleaner codebase and does not have to do any difficult thinking around what to do with synthetic rrsets in response to ANY queries. Good for Cloudflare!
[ Parent | on HN ]
Re:RFC8482 – Saying Goodbye to ANY by majke on Friday March 15, 2019 @02:33PM (#19402749)
> Limiting ANY queries to just TCP would have been a reasonable middle

This was proposed solution, the problem is that in case of attack, against a valid Authoritative service, launched via open resolvers, the open resolvers would just download Gigabits of ANY traffic with TCP. Read about this here: https://fanf.livejournal.com/140566.html

[ Parent | on HN ]
Re:RFC8482 – Saying Goodbye to ANY by CKN23-ARIN on Friday March 15, 2019 @04:29PM (#19403979)
They could have done this locally, just for their authoritative servers, without trying to force their ideas about ANY on the rest of the Internet.
[ Parent | on HN ]