nanog mailing list archives

Re: Question re prevention of enumeration with DNSSEC (NSEC3, etc.)


From: "John Levine" <johnl () iecc com>
Date: 9 May 2022 22:58:06 -0400

It appears that Ray Bellis <ray () bellis me uk> said:

Is there any case law where someone has asserted a database right for a DNS zone?

It seems like a rather stupid thing to do. If someone asserted such a
right, I would make sure not to infringe it by ensuring no entries
from that database entered my DNS caches or other software.

It wasn’t the zone itself as such - the concern was use of enumerated zone data to then perform bulk collection of 
Whois data.

It's perfectly reasonable to claim a database right in the WHOIS data,
but the offense is scraping WHOIS, not enumerating the DNS zone.

I could enumerate the DNS zone twice a day every day and so long as I stayed
away from WHOIS, nobody would notice or care.

R's,
John


Current thread: