Editing Djbdns (section)

{{lowercase|title=djbdns}}
{{Infobox software
| name = djbdns
| logo = 
| screenshot = 
| caption = 
| developer = [[Daniel J. Bernstein]]
| released = {{Start date and age|2000|3|25}}
| latest release version = 1.05
| latest release date = {{Start date and age|2001|2|11}}
| latest preview version = 
| latest preview date = 
| operating system = [[Unix-like]]
| platform = 
| genre = [[Domain Name System|DNS]] server
| license = [[Public domain]]
| website = {{URL|https://cr.yp.to/djbdns.html}}
}}
The '''djbdns''' software package is a [[Domain Name System|DNS]] implementation. It was created by [[Daniel J. Bernstein]] in response to his frustrations with repeated [[Vulnerability (computing)|security holes]] in the widely used [[BIND]] DNS software. As a challenge, Bernstein offered a $1000 prize<ref>{{cite web
|url=https://cr.yp.to/djbdns/guarantee.html
|title=The djbdns security guarantee
|access-date=2008-09-02
|archive-date=2012-07-06
|archive-url=https://web.archive.org/web/20120706100825/http://cr.yp.to/djbdns/guarantee.html
|url-status=live
}}</ref> for the first person to find a [[security hole]] in djbdns, which was awarded<ref>{{cite web
|url=http://article.gmane.org/gmane.network.djbdns/13864
|title=The djbdns prize claimed
|access-date=2009-03-04
|archive-url=https://web.archive.org/web/20090305125545/http://article.gmane.org/gmane.network.djbdns/13864
|archive-date=2009-03-05
|url-status=dead
}}</ref> in March 2009 to Matthew Dempsky.

{{As of|2004}}, djbdns's tinydns component was the second most popular DNS server in terms of the number of domains for which it was the authoritative server, and third most popular in terms of the number of DNS hosts running it.<ref>{{cite web | last = Moore | first = Don | year = 2004 | url = http://mydns.bboy.net./survey/ | title = DNS server survey | access-date = 2005-01-06 | archive-date = 2005-01-06 | archive-url = https://web.archive.org/web/20050106083440/http://mydns.bboy.net/survey/ | url-status = live }}</ref>

djbdns has never been vulnerable to the widespread [[DNS cache poisoning|cache poisoning]] vulnerability reported in July 2008,<ref>{{cite web
 | url = http://www.kb.cert.org/CERT_WEB%5Cservices%5Cvul-notes.nsf/id/800113
 | title = Multiple DNS implementations vulnerable to cache poisoning
 | access-date = 2008-08-05
 | archive-date = 2008-07-25
 | archive-url = https://web.archive.org/web/20080725050549/http://www.kb.cert.org/CERT_WEB%5Cservices%5Cvul-notes.nsf/id/800113
 | url-status = live
 }}</ref><ref>{{cite web
 | url = http://www.doxpara.com/?p=1162
 | title = An Astonishing Collaboration
 | date = 9 July 2008
 | access-date = 2008-08-05
 | archive-date = 2008-08-04
 | archive-url = https://web.archive.org/web/20080804192451/http://www.doxpara.com/?p=1162
 | url-status = live
 }}</ref> but it has been discovered that it is vulnerable to a related attack.<ref>{{cite web
 | url = http://www.your.org/dnscache/
 | title = Rapid DNS Poisoning in djbdns
 | last = Day
 | first = Kevin
 | year = 2009
 | access-date = 2009-02-23
 | archive-date = 2009-02-21
 | archive-url = https://web.archive.org/web/20090221073711/http://www.your.org/dnscache/
 | url-status = live
 }}</ref>

The [[source code]] has not been centrally managed since its release in 2001, and was released into the [[public domain]] in 2007.<ref>{{cite web |url=https://cr.yp.to/distributors.html |title=djbdns is placed in the public domain |access-date=2008-01-01 |archive-date=2012-05-25 |archive-url=https://web.archive.org/web/20120525075454/http://cr.yp.to/distributors.html |url-status=live }}</ref> As of March 2009, there are a number of [[Fork (software development)|forks]], one of which is [[dbndns]] (part of the [[Debian Project]]), and more than a dozen [[Patch (computing)|patches]] to modify the released version.<ref>{{cite web|url=http://linuxmafia.com/faq/Network_Other/dns-servers.html#djbdns|title=Detailed overview of DNS server software by Rick Moen|access-date=2009-07-13|archive-date=2009-07-27|archive-url=https://web.archive.org/web/20090727202448/http://linuxmafia.com/faq/Network_Other/dns-servers.html#djbdns|url-status=live}}</ref>

While djbdns does not directly support [[DNSSEC]], there are third party patches to add DNSSEC support to djbdns' authoritative-only tinydns component.<ref>{{Cite web |url=http://www.tinydnssec.org/ |title=DNSSEC for TinyDNS |access-date=2016-01-19 |archive-date=2016-01-26 |archive-url=https://web.archive.org/web/20160126233920/http://www.tinydnssec.org/ |url-status=live }}</ref>