Re: Global PKI on DNS?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> To: ietf@ietf.org
> Cc: isdf@isoc.org, keydist@cafax.se, openssl-users@openssl.org
> From: "John Stracke" <jstracke@incentivesystems.com>


> >So users wanting this new service will be pretty motivated to switch DNS
> >servers when the time comes, what's the big deal in that? 
>
> The big deal is that some of the more restrictive ISPs may not permit 
> customers to bypass their DNS servers.  Same as with HTTP interception 
> proxies.

That's as irrelevant as whether customers of some cable TV system
might not be able to get some new TV network, because they are not
getting Internet service.  No matter what your bill might say, you
are not getting Internet service if you also get interception proxies
or even just port 25 blocking.


Noticing openssl-users@openssl.org in the CC list of this thread makes me
ponder the compatibility of TLS with SMTP and HTTP interception proxies.


Vernon Schryver    vjs@rhyolite.com


[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]