DNS

[R P Herrold]

On Sat, 28 Nov 2009, Bob Elzer wrote:

> You do know that you can use any DNS server you want to, right ?

two caveat's here:
 	1. a common policy to avoid load problems on 
nameservers is to limit relies to non-customer IP's to only 
those domains for which one is authoritative for
 	2. an ISP can use provide an interception of DNS 
answers fairly trivially for making sure a customer passes 
through a web view of a terms and conditions page (consider 
the usual intercepts one encounters at hotels, which may be 
done that way, along with other methods)
 	There is a crpytographically secure answer mechanism 
to prevent such false results from going undetected, but it is 
not yet in wide distribution.

--Russ herrold