<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hola Nico, <br>
</p>
<p> Eso es algo que pasa muy frecuente, buen punto el que traes a
colación.</p>
<p> Un ejemplo, este año pasó esto:
<a class="moz-txt-link-freetext" href="https://www.zdnet.com/article/microsoft-has-a-subdomain-hijacking-problem/">https://www.zdnet.com/article/microsoft-has-a-subdomain-hijacking-problem/</a><br>
</p>
<p><br>
</p>
<p>Saludos,<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 7/7/20 8:11 PM, Nicolas Antoniello
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CADHEbK-u111bW241oG7=-dhQGuObhbKbMUpHVXamsV26hfuiMg@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Les adjunto un link a un interesante paper de
CAIDA sobre la importancia de mantener los archivos de Zona de
DNS actualizados y "limpios".
<div><br>
</div>
<div><a
href="https://www.caida.org/publications/papers/2020/forgotten_side_dns/"
moz-do-not-send="true">https://www.caida.org/publications/papers/2020/forgotten_side_dns/</a><br>
</div>
<div><br>
</div>
<div>
<h3
style="margin-top:1em;margin-bottom:0.5em;color:rgb(7,88,167)">The
Forgotten Side of DNS: Orphan and Abandoned Records</h3>
</div>
<div><span
style="color:rgb(0,0,0);font-size:13px;text-align:justify">DNS
zone administration is a complex task involving manual work
and several entities and can therefore result in
misconfigurations. Orphan records are one of these
misconfigurations, in which a glue record for a delegation
that does not exist anymore is forgotten in the zone file.
Orphan records are a security hazard to third-party domains
that have these records in their delegation, as an attacker
may easily hijack such domains by registering the domain
associated with the orphan. The goal of this paper is to
quantify this misconfiguration, extending previous work by
Kalafut et al., by identifying a new type of glue record
misconfiguration – which we refer to as abandoned records –
and by performing a broader characterization. Our results
highlight how the situation has changed, not always for the
better, compared to a decade-old study.</span><br>
</div>
<div><span
style="color:rgb(0,0,0);font-size:13px;text-align:justify"><br>
</span></div>
<div><span
style="color:rgb(0,0,0);font-size:13px;text-align:justify">Fraterno
saludo,</span></div>
<div><span
style="color:rgb(0,0,0);font-size:13px;text-align:justify">Nico</span></div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
LACNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:LACNOG@lacnic.net">LACNOG@lacnic.net</a>
<a class="moz-txt-link-freetext" href="https://mail.lacnic.net/mailman/listinfo/lacnog">https://mail.lacnic.net/mailman/listinfo/lacnog</a>
Cancelar suscripcion: <a class="moz-txt-link-freetext" href="https://mail.lacnic.net/mailman/options/lacnog">https://mail.lacnic.net/mailman/options/lacnog</a>
</pre>
</blockquote>
</body>
</html>