Paul Wouters <[email protected]> wrote:
> On Fri, 8 Sep 2017, Tony Finch wrote:
>
> > It isn't possible to distribute trust anchors to BYOD
> > clients with validating stubs
>
> That's not entirely true,
> https://tools.ietf.org/html/draft-ietf-ipsecme-split-dns-02
> It supports sending INTERNAL_DNSSEC_TA trust anchors.

Nice!

But I'm not sure it's entirely sensible to depend on a VPN to make an
on-campus connection work properly :-)

Tony.
-- 
f.anthony.n.finch  <[email protected]>  http://dotat.at/  -  I xn--zr8h punycode
Rockall: Northwest 6 to gale 8, decreasing 4 or 5 later. Rough or very rough.
Rain or showers. Moderate or good.

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to