Re: [DNSOP] Draft for dynamic discovery of secure resolvers

[Paul Vixie]

my threat model is intruders or eavesdroppers on the path between me and 
my rdns. i'd like the dhcp announcement to include a tcp/853 signal 
along with a pre-shared key or the hash thereof. the benefit would be 
that if my rdns network path is less secure than my dhcp network path, 
i'll improve the former by not using traditional udp/53. does that help?

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop