Hacker News Reader

My first thought on seeing that is it would be great for a DNS amplification attack. Not sure the value as an advertisement though...

I think it's too big for UDP, it'll renegotiate TCP for anything over a certain size.

thus DNS amplification is impossible because spoofing the TCP source would fail a handshake.

The size is 1876 bytes, DNS servers which support EDNS will do up to 4096 byte replies in UDP.

agreed, this is a bad idea and is likely to be abused shortly