The cr.yp.to microblog: 2012.07.21 19:41:35

2012.07.21 19:41:35 (226733674215915520) from Daniel J. Bernstein, replying to "Paul Wouters (@letoams)" (226515052608503808):

DNSSEC is the worst DDoS amplifier on the Internet. Rate-limiting ANY queries (which are standard, btw) won't fix this problem. @letoams

Context

2012.07.21 05:12:51 (226515052608503808) from "Paul Wouters (@letoams)", replying to "Andrew M. (@floodyberry)":

@floodyberry: @hashbreaker You do realize that we could have rate limited ANY queries if that abandonware qmail wasn't stupidly using it?