On Thu, Dec 18, 2008 at 03:00:40PM +0100, Bastian Blank wrote:
> On Wed, Dec 17, 2008 at 02:59:27PM -0500, Victor Duchovni wrote:
> > Postfix uses res_search(3). DNSSEC would have to be supported by the
> > C-library stub resolver code, not Postfix.
>
> DNSSEC can be checked by the recursive resolver, which is sufficient in
> most setups.
>
> > DNSSEC is very complex. I rather like DJB's DNSCurve, but it seems the
> > the political climate may be against this IMHO very sound proposal.
>
> Well, DNSCurve solves a completely different problem, transport vs
> end-to-end security.
Exactly, and I strongly believe that this is the problem that needs to
be solved. The details should probably not be discussed here.
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
