Re: The case against A6 and DNAME

[Bill Sommerfeld]

    The problem is aggravated by "anti-poison" protections that
    essentially prevent serving cached records from domains for which
    the local server is not authoritative.

With DNSSEC and signed entries, it doesn't matter who gives you the
data, it's who signs it..

I haven't looked at it that closely but it would seem at first glance
that appropriate use of SIG records could allow for some relaxation of
the "anti-poisoning" checks (though SIG's are somewhat bulky).

                                        - Bill

--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------