Re: [DNSOP] Fwd: Re: Roll Over and Die ?

2010-02-18 Thread Joe Abley
Todd, On 2010-02-18, at 10:06, Todd Glassey wrote: > El - in fact that is ONLY true on paper. If you have to remove all of the > open source components from something like LINUX you are toast. It cannot be > done as far as I can tell - same is true for anyone using NTP and DHCP as > well. This

Re: [DNSOP] Fwd: Re: Roll Over and Die ?

2010-02-18 Thread Todd Glassey
On 2/18/2010 8:31 AM, Dr Eberhard Lisse wrote: Me being only a lurker here always thought that nobody put a gun to my head using open source, never mind caveat emptor. el greetings, el El - in fact that is ONLY true on paper. If you have to remove all of the open source components from som

Re: [DNSOP] Fwd: Re: Roll Over and Die ?

2010-02-18 Thread Joe Baptista
not bad for two cents. worth a lot more in advice. Heres my two cents. DNSSEC is broken. DNSSEC will cause economic harm as it adds to business costs. There's one liability. And DNSSEC is not needed. We have options. DNSCurve works http://bit.ly/cjmH2n - let's try something that works? That would

Re: [DNSOP] Fwd: Re: Roll Over and Die ?

2010-02-18 Thread Dr Eberhard Lisse
Me being only a lurker here always thought that nobody put a gun to my head using open source, never mind caveat emptor. el greetings, el on 2010-02-18 17:54 Todd Glassey said the following: > The real answer Tony is coming out of left field and it is the legal > claims being asserted against pe

[DNSOP] Fwd: Re: Roll Over and Die ?

2010-02-18 Thread Todd Glassey
The real answer Tony is coming out of left field and it is the legal claims being asserted against people intentionally fielding code they know is broken and for which they refused to accept criticism's about that code (oddly enough from people like Dean and I and a number of others. The real

Re: [DNSOP] Roll Over and Die ?

2010-02-18 Thread Tony Finch
On Thu, 18 Feb 2010, George Barwood wrote: > Any reaction to this CircleID article ? > > http://www.circleid.com/posts/dns_resolvers_and_dnssec_roll_over_and_die/ https://www.isc.org/announcement/response-to-concerns10Feb http://unbound.net/pipermail/unbound-users/2010-February/001031.html Tony.

[DNSOP] Roll Over and Die ?

2010-02-18 Thread George Barwood
Any reaction to this CircleID article ? http://www.circleid.com/posts/dns_resolvers_and_dnssec_roll_over_and_die/ It seems that BIND and Unbound can "enter a mode of sustained, repeated and very rapid querying of DNS servers for DNSKEY and RRSIG Resource records, causing potential problems