This protocol's record types include AAAA ["quad A"] and CNAME.
Source port randomization was introduced to reduce the success probability of one attack on this protocol, which involves guessing a 16-bit transaction ID. In order to bypass a firewall, one can use tools like NSTX, Heyoka, or iodine, which tunnel data through this protocol. In 2008, Dan Kaminsky found a vulnerability in this protocol that greatly facilitated cache poisoning attacks. Vagner Sacramento discovered a birthday attack on (*) BIND, the most commonly used software for this protocol. This protocol's record types include AAAA ["quad A"] and CNAME. In October 2016, sites like Reddit and Twitter went down in the US due to a DDoS attack on this protocol. This protocol usually uses UDP port 53 and is implemented by nameservers. For 10 points, name this protocol often compared to an Internet phone book because it converts web addresses to IP addresses.
Source port randomization was introduced to reduce the success probability of one attack on this protocol, which involves guessing a 16-bit transaction ID.
Domain Name System