On Mon, Sep 01, 2008 at 04:49:12PM -0400,
 Paul Wouters <[EMAIL PROTECTED]> wrote 
 a message of 18 lines which said:

> many issues there which are not addressed [...] authenticated denial
> of existence,

Although I agree with your criticism that there is no published
*specification* of DNScurve (wether in Internet-Draft form or else),
this specific issue seems addressed today: DNScurve signs the packet,
not the resource records, and therefore a NXDOMAIN response can be
signed (unlike what happens with DNSSEC).




_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to