On Wed, Dec 17, 2008 at 02:59:27PM -0500, Victor Duchovni wrote:
> Postfix uses res_search(3). DNSSEC would have to be supported by the
> C-library stub resolver code, not Postfix.
DNSSEC can be checked by the recursive resolver, which is sufficient in
most setups.
> DNSSEC is very complex. I rather like DJB's DNSCurve, but it seems the
> the political climate may be against this IMHO very sound proposal.
Well, DNSCurve solves a completely different problem, transport vs
end-to-end security.
Bastian
--
It would be illogical to assume that all conditions remain stable.
-- Spock, "The Enterprise Incident", stardate 5027.3
