DNS/mallmanについて、ここに記述してください。
http://www.icir.org/mallman/pubs/SCRA14/SCRA14.pdf
http://www.icir.org/mallman/pubs/SCRA14/SCRA14-talk.pdf
"Off-path Attacks" のスライド
Craft an acceptable DNS response to squeeze between the real DNS request and response
”Survey of Mitigations to Kaminsky” 対応状況 16%も危険!? なままか。
- But these are the less frequently used とある。
FDNS have a vulnerablility that is much easier to exploit than the Kaminsky vulnerability