Re: NSEC3 salt lifetime (and some other DNSSEC params): sane value?

2010-09-22 Thread Niobos
On 2010-09-21 16:46, Kalman Feher wrote: > If you don't > want someone to know it, don't make it public (at the very least). I agree totally! > You'll have to accept that no matter what steps you take, your public > information will be available to those who wish to find it. I agree. But I'd argue

Re: NSEC3 salt lifetime (and some other DNSSEC params): sane value?

2010-09-22 Thread Niobos
On 2010-09-21 16:56, Phil Mayers wrote: > On 21/09/10 14:43, Niobos wrote: >> On 2010-09-21 15:32, Kalman Feher wrote: >>> On 21/09/10 8:43 AM, "Niobos" wrote: >>> I personally find protection against zone enumeration to be a false >>> sense of >>> security. If it's public people will find it. Ask

Re: NSEC3 salt lifetime (and some other DNSSEC params): sane value?

2010-09-22 Thread Matus UHLAR - fantomas
> >> I'll reply with a quote from the BIND& DNS book: > >> It’s the difference between letting random folks call your company’s > >> switchboard and ask for John Q. Cubicle’s phone number [versus] sending > >> them a copy of your corporate phone directory. > > That is a poor analogy. imho it's p

Need infos to setup a subdomain with DDNS + DHCP

2010-09-22 Thread Frank Bonnet
Hello I have to set up a subdomain that will works with DDNS and DHCP Our domain does not have DHCP or DDNS so I would like to setup a delegate DNS acting for the subdomain. Any infos, links , howto , configurations examples , welcome ! Thanks a lot. ___

Re: NSEC3 salt lifetime (and some other DNSSEC params): sane value?

2010-09-22 Thread Kalman Feher
On 22/09/10 11:29 AM, "Matus UHLAR - fantomas" wrote: >>> I'll reply with a quote from the BIND& DNS book: >>> It¹s the difference >>> between letting random folks call your company¹s >>> switchboard and ask >>> for John Q. Cubicle¹s phone number [versus] sending >>> them a copy of >>> yo