If you believe the authoritative and discard the glue, what was the
benefit of the signed glue?
It renders the glue tamper-evident. If an intermediary tampers with the
signed glue, it will cause an immediate SERVFAIL due to DS validation. If
an intermediary tampers with the unsigned glue, it will have no effect.
That makes sense so perhaps the draft could say so more clearly.
Regards,
John Levine, [email protected], Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly
_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy
