-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 02/05/2015 07:59 PM, Mark Andrews wrote: >> >> But be careful. There be dragons here. Computers updating computers to cont >> rol who controls the domains? > > Computers update computers all the time. It's about establishing > the right controls. There is nothing technologically hard about > giving someone the right to update just the NS records. > *** Except when they do it on your behalf without your consent and under the (invisible, unspeakable) pressure of a police state.
For the record, as a regular Tor user, I do not have the same reverence to Cloudflare's customer service. Although they keep defending the thesis that "website owners" must select an emergency defense mode to actually block Tor traffic, as more websites use Cloudflare services, they become unusable without a proprietary javascript-powered CAPTCHA. Given their jurisdiction, and the current war on cryptography, the potential for abusive breaches of privacy with this system are non-negligible. Adding to that the power to update the authoritative name servers for a domain, and you have a perfect Internet for Police State. And until now, without any IETF-approved alternative. == hk -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJU1AifXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQ0IyNkIyRTNDNzEyMTc2OUEzNEM4ODU0 ODA2QzM2M0ZDMTg5ODNEAAoJEEgGw2P8GJg9P5gP/11fxAttLj8JgNlfsckEbmjD lA3cmTU8khH9fhDlFWTXEfZS7XIBsXkMv619is4N5UvS/uGyKQa7D5nVGbVs8vzn /cHFhulqP7AXMN9z85bPJqFcJbdjwdDc+lAr2d+sahv+NZ0Ah+kfQkw5G/jm+drl zzQPr6rIxce55YeH6chc2hChs5vOvn/khxGfTk0uB1fp77Eqy9VhOz1lZN3S672h LeXQRPURyzw2ZBa/YWbLT9LpF2QAjTi1ajRAH/SIqw5ZspcAWo0tvIqo7dM1o7xx hC+ZkFjuu/sMXx4kSE6aj9qhRAmwEqz96r33twFEjflRJReJ2v6Vto8z+jirMyoP G7e0XtkfYJ9XfJ91KHsn6rqQu9Z3q174HUJPl46aUgDkNQpzSw7aFm/A1GeqT+HY UsRLDOAbnEBECRoKJW3dedjymFZr8Jy4/8mh+CapJ4jLbSvAP2W2S0G/ahTZ9NUO UXrr9Dij/XyjqxlG7otAiEHBMTd7y27j/LrKDWIh9Vn51jKGrzCV/xmAMjjL7SjJ jgML19rd6YBJDbWSEejDuWuzKzC1wMm44Y5Gkw3FguQtoY7nj0KP+ZJKN3o2HHyZ 5jvkiBEfayPM5Js4XvrP4Ny3mnbCV8OSWehd5Rnawoyl0ZaXufkYRDMkBJ2ABpZb UqD2cRRi7EYtrsndeJnE =9L6K -----END PGP SIGNATURE----- _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop