I feel this is a corner case. My experience with 'mom' whitegoods is
that they age out much faster than the 10+ year case. Shops do not
hold electronic goods for sale that long, if its old but unboxed, you
have taken yourself into a dark alley deliberately. If you genuinely
were supporting your mum by buying two, and keeping one offline for 10
years you would have done better buying one, and replacing after 5.

Once you are in a head-space of 'must be old stock compatible' its a
different, not-mum friendly world. Its NASA and you are reading 80
column cards.

Disclosure: I turn my adm-5 lear ziegler terminal on every now and
then, but the flyback transformer whine is painful. I have stock which
exceeds a ten year life but I don't deploy it on anyone I love.

On Wed, Nov 16, 2016 at 6:33 PM, Ted Lemon <mel...@fugue.com> wrote:
> Or your device needs an RTC...
>
> On Wed, Nov 16, 2016 at 6:30 PM, Mikael Abrahamsson <swm...@swm.pp.se> wrote:
>> On Wed, 16 Nov 2016, Ted Lemon wrote:
>>
>>> Why would you put a device on the shelf for ten years?  Is this a real
>>> scenario?  This is certainly a known issue that has been talked about at
>>> length--the conclusion when it was discussed is that there is nothing we can
>>> do about it, and it's relatively unlikely, and manually fixable.
>>
>>
>> How is it manually fixable? By someone to ssh into the device and edit a
>> file with new key material?
>>
>> My mom can't do this.
>>
>> I have personally picked a Cisco AGS out of a unopened box in 2010. By then
>> it was probably 15-20 (?) years old?
>>
>> Anyhow, my takeaway from this message is that DNSSEC can't be used as a
>> mechanism for device autoconfiguration. No device trying to autoconfigure
>> itself can rely on DNSSEC, because there is a fairly short (few years)
>> window for that device to get plugged in, because after that it can't
>> autoconfigure itself.
>>
>> Correct?
>>
>>
>> --
>> Mikael Abrahamsson    email: swm...@swm.pp.se
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to