= DNS/EDNS/letsencrypt =
について、ここに記述してください。


詳細はこちらへ:
[[DNS/FCP/Let's_Encrypt]]


2018-10-03 
Mitigating DNS fragmentation attack 

EDNS Buffer Size Changing to 512 Bytes

Summary

As of November 15th, 2018 our DNS resolvers (both staging and production) advertise
an EDNS reassembly buffer size of 512 bytes. 

This change should not require any adjustment by subscribers.

In practical terms, we set edns-buffer-size: 512 in our Unbound configuration 66.