[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Anti Capitalism?



bmanning@ISI.EDU allegedly said:

> 	When did this list become "redefine existing DNS capabilities".
> 
> 	All the facilities that you crave are defined and there are
> 	even a few implementations.

My first proposal, which I sent as a draft to iahc, was to use secure
DNS with secure Dynamic update.  But in fact, all the capabilities are
*not* yet implemented, though they may be here soon.  And in addition 
to support in the nameservers, you need to have front end software to 
use these capabilities.

I do believe that within two years adequate DNS support will be 
available, but I didn't want that delay to preclude the use of DNS.

> 	This kicker is that you can't -force- your downstreams  
> 	to add these records.

I believe that current BIND will cache TXT records.  That is all that 
is necessary to get off the ground.

-- 
Kent Crispin				"No reason to get excited",
kent@songbird.com,kc@llnl.gov		the thief he kindly spoke...
PGP fingerprint:   5A 16 DA 04 31 33 40 1E  87 DA 29 02 97 A3 46 2F