On 2022-05-03 06:31, Gaurav Kansal wrote:
Yup. But if the DNS infra is under my control, then definitely the keys (which i have used for encryption) will also be with me. Am i missing something here ? 🧐
I'll see your privacy keys and raise you Perfect Forward Secrecy. Although I'm not really sure if PFS is implemented anywhere in the DNS world at this point, except possibly DoH.
-- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users