Re: Dynamic DNS services and other DNS contortions

In article <87wt25rewq.fsf@xxxxxxxxxxxxxxx>,
Nix <$}xinix{$@esperi.org.uk> wrote:
On 21 Feb 2007, Nick Leverton verbalised:
This is just a quick thought based on your comment about already running
BIND yourself. Not really researched in depth - in particular I'm not
sure if BIND is secure enough to run DDNS over the internet, even though
it does have cryptographic keys for authorisation and has been rewritten
at least once in recent years.

IIRC a significant number of root nameservers run BIND, so it can't have
*too* awful a security record (root servers being rather critical things
even now that there are hundreds of them).

For sure. I was more concerned about the DDNS bit of the scheme as I
don't know how much exposure to the net that's had.

Nick
--
http://www.leverton.org/ ... So express yourself
.