* Jim Reid:

> So what? If the served zones are signed, it simply doesn't matter if
> the address of a name server is spoofed or hijacked.

This is only true if the whole DNS tree is signed (and if you don't
value query privacy).

-- 
Florian Weimer                <fwei...@bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to