My question as someone who doesn't know much about DNS beyond the most basic stuff, how would a DNS resolver know a when query is spoofed? You can maintain a query cache to filter out unsolicited (spoof) responses but what would make a query valid or invalid? I'm talking about DNS/UDP btw.
Maybe some sort of challenges? Authentication? Like DNS cookies or something.
Maybe some sort of challenges? Authentication? Like DNS cookies or something.