They would have to give some kind of error code that indicates that the DNS serv... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		sp332 on Jan 11, 2012 \| parent \| context \| favorite \| on: Pro-SOPA Comcast just implemented SOPA-incompatibl... They would have to give some kind of error code that indicates that the DNS server isn't working. Any false assertion about DNS results, including false NXDOMAIN responses, will break DNSSEC (your computer would notice that the response has been forged).

tedunangst on Jan 12, 2012 [–]

And what do you do after detecting a forged NXDOMAIN response? You still don't have the IP address you wanted.

marshray on Jan 12, 2012 | [–]

Complain.

Look for other DNS resolvers.

(human and/or automated processes)

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact