Wellington, Brian <bwelling=40akamai....@dmarc.ietf.org> wrote:

> SIG(0) was implemented in BIND 9 back when BIND 9 was basically the only
> modern implementation, and no one used it then.

I think the problem is it isn't a complete implementation: you can't use
SIG(0) in all the places you can use TSIG. The TKEY support seems to be
specific to Kerberos, whereas broader support would make it a neat way to
use slow SIG(0) to establish fast TSIG session keys.

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
Trafalgar: In southeast, cyclonic 6 or 7 decreasing 4 or 5 later, otherwise
northeasterly, backing northerly later, 4 or 5, occasionally 6 in northwest.
Moderate. Rain or thundery showers. Good occasionally poor.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to