DNS/FCP/haya/unbound-optionについて、ここに記述してください。

https://lists.dns-oarc.net/pipermail/dns-operations/2013-September/010713.html

> > Fragmentation can also occur in the `authority` section, e.g., similarly
> to our attack exploiting referral response from a parent domain. So, I am
> not sure how this can work, I think that this requires evaluation to
> confirm.
>
> It has since been mentioned on the thread that the countermeasure I
> described above is essentially what the "harden-referral-path" option
> implements in Unbound.  It would be interesting to re-test your attacks
> against Unbound with this option.
>

Ok, I have not tested this.

referral response の毒が可能な条件を詰めること。-- ToshinoriMaeno 2018-11-27 14:17:30

https://lists.dns-oarc.net/pipermail/dns-operations/2013-September/010704.html