Knowledge Base

Search the knowledge base

Knowledge Base > Miscellaneous

OpenDNS and Cache Poisoning

Cache poisoning typically was a problem in the past for nameservers that mixed logic in how they handled recursive and authoritative DNS responses. Since OpenDNS was designed from the ground up to avoid issues involving cache poisoning and other threats we believe we are well protected from these types of attacks. We carefully check and rely on the chain of trust built into DNS delegations and refuse to trust 'additional information' handed back from authoritative nameservers that is not part of the needed glue.

 

Updated: October 22, 2007