29 aug 2013 kl. 03:27 skrev Peter Saint-Andre <stpe...@stpeter.im>: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 8/28/13 12:42 PM, Olle E. Johansson wrote: >> >> 28 aug 2013 kl. 18:33 skrev Peter Saint-Andre >> <stpe...@stpeter.im>: >> >>> DANE/DNSSEC is great for that, or will be when it is more >>> generally available, but IMHO we might need to wait *years* for >>> that to happen. >> >> Peter, If you keep repeating this statement it will become true... > > I don't think stpeter is that powerful. ;-) ;-) > >> I don't think we're talking so many years here, but it all depends >> on which TLD you're using. In Sweden we've had DNSsec support in >> .SE for many years, we have patches for OpenSSL for DANE and are >> starting to look at code. > > And our friends in .jp don't even have DNS SRV support yet! Please explain. > >> I think you should modify this statement that one might need to >> wait years for DANE/DNSsec to be implemented in all TLDs. > > It's not just the registrars -- it's the resolvers, the nameservers, > the operating systems, the application software, the clients, the > servers, the distros, etc. There are a lot of moving parts involved. Well, when OpenSSL has this by default and a new release of Linux is released with that version of OpenSSL a lot of apps will support this automagically. And a few more people understanding then SSL proxy - what it is and does - things will move fast.
But I do acknowledge that things take time. That should not stop us early movers and shakers from pushing forward... > > Just my centigram of silver. ;-) Oh dear, that's metric! /O > > Peter > > - -- > Peter Saint-Andre > https://stpeter.im/ > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.19 (Darwin) > Comment: GPGTools - http://gpgtools.org > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBAgAGBQJSHqN2AAoJEOoGpJErxa2p8qgQAJDb9+irrLk2s56xXSp0ZoW9 > o/IxgeBQNu6m3Ov0fKvuA8KBVUBBdyJw+b1m0+xQDguhrKz0RQQFva7lV91g1uq/ > WDq5cQnKufX8lR4KXIiEZ0qaH7fh7P9LWMZSICTRMvb60DaAsFZEmUL79Y9sP/KS > 4YpyihVKuQ+e8s7bA9l4TY9jbZh4UUoEtRkeKVh8NJlqG2LHItIV7M9y/gseXyBQ > 6CNYn1r48h8YzJATcdE7sZqBwjj2S8tU0tHnA92IWBvKPKF9cBGJqXl11kPqF+7C > x2qzBqIkAmsONOqLB/XiAKRNM65qG1/tV1ZNWA5njD9aMdj63AadB2/gUrqZMjiT > fInZju3GJidqX8/m0mF/DpmGAymxRDTEBeFf1qCX4BPrDYtcTJHJkRv63erTnhsl > 3h4oh8TCPks1N01y2YfwzeK1zfUitqEH4E6oFcXrZdIwO2u40eYsjpQnLU/spnUs > N9zZ27w/26CxEAuI/rtK3xToDA93S71gLs/AJJlv/KF6x+Z4EUwAS1qxhuYDA/k0 > DKNo0G9/YBHMgoPbK0YDS20bW/ehO1zEnHtXW337OzCv855JJ2OIJ6HEDwgfxaii > HziOzfj77OQy7zMieLRURCNaIsOa6Fgutv/Jq2Ylf26yiNwDxL0tzM4XbHnieW5j > 50V2cfdC3lZi4z2BN/l6 > =toIw > -----END PGP SIGNATURE----- _______________________________________________ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org _______________________________________________
