Ted Lemon <ted.le...@nominum.com> wrote: > > "As secure as DNSSEC" is not always the required level of security.
Actually it's nonsense. DNSSEC secures the publication mechanism. The security of the update mechanism is pretty much orthogonal. If your updates are insecure your zone may be full of junk, but DNSSEC tells people looking at the zone that it's authentic junk that was really published by your dodgy master servers. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Rockall, Malin: Westerly or northwesterly 4 or 5, occasionally 6 at first, becoming variable 3 in south. Moderate, occasionally rough until later. Showers. Good. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
