User: ZippyCycle

Re:Why not just do flood-checking?

On: BIND Still Susceptible To DNS Cache Poisoning

This would become a DDoS vector. All I need to do is start hammering your resolving name server with response packets for commonly used domains and suddenly you can't access anything anywhere.