ataques ao DNS e DNSSEC

ITAR - Interim Trust Anchor Repository:
http://www.networkworld.com/news/2009/022309-dns-security.html

"CANN's Interim Trust Anchor Repository – or ITAR -- allows top-level domains such as .se for Sweden and .br for Brazil to have fully functioning DNSSEC deployments without waiting for the root zone to be signed."

Um ataque interessante de XSS usando DNS:
http://en.wikipedia.org/wiki/DNS_rebinding

(com agradecimentos ao Eugénio Pinto)