BIND is now maintained by Paul Vixie under the auspices of the Internet Software Consortium. Early versions of BIND, therefore, didn't have much in the way of security features. The purpose of a naming service, after all, was to make names and addresses public, and to advertise them as widely as possible. Today, the Internet is a rougher neighborhood. Spoofing attacks against name servers are becoming more common.
Miscreants transfer whole zones of data from name servers to plot their next targets.
BIND has had to adapt to work in this new environment. Others are internal mechanisms, such as BIND's additional data and credibility checking. Let's start by taking a closer look at the internal mechanisms. Under the Hood Internal Additional Data Checking BIND spoofing attacks are unfortunately becoming more and more common. These attacks typically take advantage of trusting name servers by injecting spurious data into their caches, that they later use.