I At 11:07 AM -0400 6/1/07, Edward Lewis wrote:
>At 23:41 -0400 5/31/07, Dean Anderson wrote:
>
>>I don't know of anyone ever using reverse DNS to enforce export control
>>of crypto software.
>
>We ("we" referring to my employer in 1997) did.

I can confirm Ed's point that reverse DNS lookup was the technique approved
by appropriate government officials when it was applied to at least some
export controlled software.  I think that 1997 was within the time frame it
was being used but I'm less certain about the dates that it was actually
required since the rule set changed over time - but it was required to make
our early early DNSSEC implementation available on an ftp server and was
considered adequate by the government officials (even though I always
thought that it was a Really Dumb control!).

Russ Mundy

>
>--
>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>Edward Lewis                                                +1-571-434-5468
>NeuStar
>
>Sarcasm doesn't scale.
>
>_______________________________________________
>DNSOP mailing list
>DNSOP@ietf.org
>https://www1.ietf.org/mailman/listinfo/dnsop


_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www1.ietf.org/mailman/listinfo/dnsop

Reply via email to