I'm asking this question as software (and also because there have been a few DNSSEC questions on here in the past).
http://en.Wikipedia.org/wiki/DNS_cache_poisoning#Prevention_and_mitigation
I saw this on Wikipedia and wondered if someone could explain it for me:
"As stated above, source port randomization for DNS requests, combined with the use of cryptographically-secure random numbers for selecting both the source port and the 16-bit cryptographic nonce, can greatly reduce the probability of successful DNS race attacks"
I don't understand how port randomization would prevent DNS poisoning attacks on the client side? Or is this only referring to the DNS server? Could the same port randomization be used on the client side?