I At 11:07 AM -0400 6/1/07, Edward Lewis wrote: >At 23:41 -0400 5/31/07, Dean Anderson wrote: > >>I don't know of anyone ever using reverse DNS to enforce export control >>of crypto software. > >We ("we" referring to my employer in 1997) did.
I can confirm Ed's point that reverse DNS lookup was the technique approved by appropriate government officials when it was applied to at least some export controlled software. I think that 1997 was within the time frame it was being used but I'm less certain about the dates that it was actually required since the rule set changed over time - but it was required to make our early early DNSSEC implementation available on an ftp server and was considered adequate by the government officials (even though I always thought that it was a Really Dumb control!). Russ Mundy > >-- >-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- >Edward Lewis +1-571-434-5468 >NeuStar > >Sarcasm doesn't scale. > >_______________________________________________ >DNSOP mailing list >DNSOP@ietf.org >https://www1.ietf.org/mailman/listinfo/dnsop _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www1.ietf.org/mailman/listinfo/dnsop