Re: [saag] : DNSSEC PKI semantics and risks (was tangentially: Last Call: <draft-dukhovni-opportunistic-security-01.txt>)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 7 Aug 2014, Phillip Hallam-Baker wrote:

<trans wg cochair hat on>

The reason TRANS does not currently appear to be relevant to the
DNSSEC advocates is that they are simplifying the PKI problem to
exclude consideration of the entire class of attacks that TRANS is
designed to control.

We have had only very preliminairy TRANS DNSSEC discussion so far.

I am not aware of anything being excluded at this point. Some concerns
raised do relate to the sheer size of DNS and what to log and what not
to log to keep the log servers alive.

What do you believe has already been excluded from TRANS with respect to
DNSSEC by DNSSEC advocates?

Paul





[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]