Editing DNS zone transfer (section)

===Exposure of data===
The data contained in a DNS zone may be sensitive from an operational security aspect. This is because information such as server hostnames may become public knowledge, which can be used to discover information about an organization and even provide a larger [[attack surface]]. In June 2017 the registrar responsible for Russian top-level-domains accidentally enabled DNS zone transfers via AXFR which led to 5.6 million records being accidentally exposed.<ref>{{Cite news|url=https://securitytrails.com/blog/russian-tlds|title=Wrong Bind Configuration Exposes the Complete List of Russian TLD's to the Internet|date=2018-03-14|work=SecurityTrails Blog|access-date=2018-04-10|language=en}}</ref>

In 2008 a court in North Dakota, USA, ruled that performing a zone transfer as an unauthorized outsider to obtain information that was not publicly accessible constitutes a violation of North Dakota law.<ref>{{cite news|title=Anti-spammer fined for accessing DNS records of private network|url=http://www.h-online.com/security/news/item/Anti-spammer-fined-for-accessing-DNS-records-of-private-network-735841.html|newspaper=The H|date=18 January 2008}}</ref>