RFC 3118 provides a scheme for this issue:
http://www.rfc-base.org/txt/rfc-3118.txt 


2015-04-14 



Zhiwei Yan 



发件人: Paul Wouters 
发送时间: 2015-04-14  11:04:58 
收件人: Zhiwei Yan 
抄送: dns-privacy 
主题: Re: [dns-privacy] Considering DHCP 
 
On Tue, 14 Apr 2015, Zhiwei Yan wrote:
> Hi, all,
> Then why not consider the DHCP?
> DHCP can support client authentication and can be used to configure the RS 
> key on the authenticated client.
> Do you think this will help?
How do you know the DHCP server is not a rogue attacker?
How does the system determine encrypting to the DHCP/DNS server is
guaranteed to not be eavesdropped on?
It depends on if I trust that network (eg my home) or not (eg starbucks)
Paul
_______________________________________________
dns-privacy mailing list
dns-privacy@ietf.org
https://www.ietf.org/mailman/listinfo/dns-privacy
_______________________________________________
dns-privacy mailing list
dns-privacy@ietf.org
https://www.ietf.org/mailman/listinfo/dns-privacy

Reply via email to