@techreport{andrews-dnsop-defeat-frag-attack-00, number = {draft-andrews-dnsop-defeat-frag-attack-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-andrews-dnsop-defeat-frag-attack/00/}, author = {Mark P. Andrews}, title = {{Defeating DNS/UDP Fragmentation Attacks}}, pagetotal = 5, year = 2019, month = jul, day = 2, abstract = {It is possible to force a DNS server to fragment its response such that a fragmentation reassembly attack can insert records into the response. This document uses TSIG with a well known key to defeat such attacks.}, }