On Thu, Apr 23, 2009 at 06:32:38PM +0800,
 ???? <m...@cnnic.cn> wrote 
 a message of 85 lines which said:

> while DNSSEC fails to give a means by which the DNS queries or
> responses transmitted between a host and a recursive server could be
> guaranteed integrity and authentication. 

Not really true. Many people think that the validating resolver should
be on the host itself. This would use DNSSEC to secure even the last
mile.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to