Ted Lemon <[email protected]> wrote: > > "As secure as DNSSEC" is not always the required level of security.
Actually it's nonsense. DNSSEC secures the publication mechanism. The security of the update mechanism is pretty much orthogonal. If your updates are insecure your zone may be full of junk, but DNSSEC tells people looking at the zone that it's authentic junk that was really published by your dodgy master servers. Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ Rockall, Malin: Westerly or northwesterly 4 or 5, occasionally 6 at first, becoming variable 3 in south. Moderate, occasionally rough until later. Showers. Good. _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
