Ted Lemon <ted.le...@nominum.com> wrote:
>
> "As secure as DNSSEC" is not always the required level of security.

Actually it's nonsense. DNSSEC secures the publication mechanism. The
security of the update mechanism is pretty much orthogonal. If your
updates are insecure your zone may be full of junk, but DNSSEC tells
people looking at the zone that it's authentic junk that was really
published by your dodgy master servers.

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
Rockall, Malin: Westerly or northwesterly 4 or 5, occasionally 6 at first,
becoming variable 3 in south. Moderate, occasionally rough until later.
Showers. Good.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to