Which you can do with DNSSEC but the key management will be enormous.
--
Mark Andrews
> On 21 Jun 2023, at 15:39, Masataka Ohta
> wrote:
>
> Matt Corallo wrote:
>
>>> As PKI, including DNSSEC, is subject to MitM attacks, is
>>> not cryptographically secure, does not provide end to end
>>>
Matt Corallo wrote:
As PKI, including DNSSEC, is subject to MitM attacks, is
not cryptographically secure, does not provide end to end
security and is not actually workable, why do you bother?
It sounds like you think nothing is workable, we simply cannot make
anything secure
If an end and
On 6/20/23 10:20 PM, Masataka Ohta wrote:
Matt Corallo wrote:
So, let's recognize ISPs as trusted authorities and
we are reasonably safe without excessive cost to
support DNSSEC with all the untrustworthy hypes of
HSMs and four-eyes principle.
I think this list probably has a few things to
Matt Corallo wrote:
So, let's recognize ISPs as trusted authorities and
we are reasonably safe without excessive cost to
support DNSSEC with all the untrustworthy hypes of
HSMs and four-eyes principle.
I think this list probably has a few things to say about "ISPs as
trusted authorities"
I
On 6/19/23 8:08 PM, Masataka Ohta wrote:
Matt Corallo wrote:
This is totally unrelated to the question at hand. There wasn't a question about whether a user
relying on trusted authorities can maybe be whacked by said trusted authorities (though there's
been a ton of work in this space, most
On 6/20/23 16:09, sro...@ronan-online.com wrote:
Or the investment to upgrade doesn’t make financial sense.
It never makes sense if you are printing money with no competition.
Mark.
Or the investment to upgrade doesn’t make financial sense.
> On Jun 20, 2023, at 9:54 AM, Mark Tinka wrote:
>
>
>
>> On 6/20/23 15:20, Mike Hammett wrote:
>>
>> Sometimes yes, sometimes no.
>>
>> When you go down in density, your fixed cost per customer really escalates
>> and you simply
On 6/20/23 15:20, Mike Hammett wrote:
Sometimes yes, sometimes no.
When you go down in density, your fixed cost per customer really
escalates and you simply can't afford to provision as much as you'd
like to. When you leave glass as a transport mechanism, scaling isn't
easy. When you don't
Sometimes yes, sometimes no.
When you go down in density, your fixed cost per customer really escalates and
you simply can't afford to provision as much as you'd like to. When you leave
glass as a transport mechanism, scaling isn't easy. When you don't have a
wireline to the customer prem, sc
9 matches
Mail list logo
