RE: looking for reviews of DNS software

I've gotten a lot of great responses to my query, thanks everybody, but what
I still don't have is any objective, third-party analysis of _anything_.
The djbdns site is full of vague, unsubstantiated barbs towards BIND and
I've gotten a lot of precise, unsubstantiated answers to my question :)

I realize that root-server-operators might be tight-lipped about their exact
configurations, but are all root-servers still running BIND?  The best I
could find was a pre-2000 Y2K DNS analysis that mentioned it.

The wider deployment, open-source nature and greater features are good
points in BIND's favor, I'll run with those.

Thanks everybody,
Steve Roylance
-----Original Message-----
From: Danny Mayer [mailto:mayer@xxxxxxx] 
Sent: Saturday, June 29, 2002 9:58 AM
To: Roylance, Stephen D.; bind9-users@xxxxxxx
Subject: Re: looking for reviews of DNS software


Since you are dealing with the information security team, you can point
out that BIND 9 inplements DNSSEC while djbdns does not, follows all
of the standards (being the reference implementation) while djbdns only
follows whatever standards that djb thinks is important. For BIND 9,
you will get good turnaround on bugs, security advisories, etc. Since BIND
has something like 90% of the market for DNS servers, is free and
open-source, why go with an unknown? I don't know what past failings
they are aware of, but are they aware of djbdns's past failings, or is it
that
they haven't heard anything since not many people use it?

Danny