logoalt Hacker News

adzm • yesterday at 9:56 PM • 1 reply • view on HN

> many large TXT records can be abused for DDoS purposes. dig -t txt ebay.com for a DDoS Example used today

What does this mean, I see a bunch in the lookup but I don't understand the ddos part


Replies

Bender • yesterday at 10:01 PM

If a site has a large set of TXT records, they can be used by clients that spoof packets to request large volumes of answers by DNS servers. This is called an amplification attack. Many tiny spoofed requests in, many large answers out.

➕ show 1 reply