On Oct 28, 2013, at 12:07 AM, Masataka Ohta <[email protected]> 
wrote:
> Then, plain DNS modified to have 32 (or 64?) bit messages
> ID is as secure as DNSSEC.

How does a 32 or 64 bit message ID protect you from on-path MITM/injection 
attacks?

Protecting the communication channel does not equal protecting the data.

Regards,
-drc

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to