Non-Standard Large TTLs in DNS Query Responses

The DNS RFC defines a maximal TTL as MaxInt, namely 231 - 1, which affects the design of systems and repositories for DNS results. We show that there are cases where resolvers answer with larger values, up to 232 - 1, which may translate to negative numbers if the repository is using the standard singed integer representation, or crash a system.

Authors

Institutions

Publication Details

Published
2025-07-14
DOI
https://doi.org/10.1145/3744200.3744777
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Non-Standard Large TTLs in DNS Query Responses

Yuval Shavitt, Omer Shreibstein
Network Security and Intrusion Detection
article

Non-Standard Large TTLs in DNS Query Responses

Yuval Shavitt, Omer Shreibstein
article en

Abstract

The DNS RFC defines a maximal TTL as MaxInt, namely 231 - 1, which affects the design of systems and repositories for DNS results. We show that there are cases where resolvers answer with larger values, up to 232 - 1, which may translate to negative numbers if the repository is using the standard singed integer representation, or crash a system.

Arotech (Israel) (IL)
Openalex Percentile: Top 81%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Non-Standard Large TTLs in DNS Query Responses — Yuval Shavitt, Omer Shreibstein · (2025) | TGRS Research Map | TGRS