[prev in list] [next in list] [prev in thread] [next in thread] 

List:       djbdns
Subject:    Re: Full featured djbdns jumbo patch
From:       Felix von Leitner <leitner () fefe ! de>
Date:       2001-10-11 14:28:15
[Download RAW message or body]

Thus spake Greg Hudson (ghudson@MIT.EDU):
> > Well, DNSSEC makes no sense at all if it is not required by the
> > registry.
> Eh?  Why does it matter if www.sluggy.com can be forged, as long as
> www.etrade.com and www.cnn.com cannot be?

That is exactly the point.  You ask for www.cnn.com and get an unsigned
packet.  Does that mean that it was forged or that cnn neglected to sign
their zone?

Felix

[prev in list] [next in list] [prev in thread] [next in thread]