On Tue, Aug 19, 2008 at 08:55:31AM -0400, Andrew Sullivan wrote: > Now, maybe that doesn't matter for many of these cases. It is > entirely possible that DNSSEC deployment for most zones is just not > worth it. If that's true, however, why are we so worried about poison > attacks?
Because quite a number of people care deeply about the success of DNSSEC, and this is a window of opportunity where DNSSEC finally addresses something operators worry about. The cost is not an issue that is dwelled upon now. Bert -- http://www.PowerDNS.com Open source, database driven DNS Software http://netherlabs.nl Open and Closed source services _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop