"Rather than attempt to adopt the technology as a solution to the attack described by Kaminsky..." This statement doesn't make sense; it's not an either-or situation. Almost everyone has already updated their DNS software to do port randomization. And everyone knows that this is only a temporary workaround. The question is what to do as a long-term solution.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/807/2583#2583