Re: DNSKEY Validation

2009-07-15 Thread Chris Thompson
On Jul 14 2009, Mark Elkins wrote: On Tue, 2009-07-14 at 17:50 +1000, Mark Andrews wrote: In message 1247555725.13064.4.ca...@ilinux, Mark Elkins writes: OK - so I accept that the algorithm will change. What about some sort of validation of the base-64 part of the key? Is there a

Re: DNSKEY Validation

2009-07-14 Thread Mark Elkins
OK - so I accept that the algorithm will change. What about some sort of validation of the base-64 part of the key? Is there a checksum byte/word? Is there a way of checking that the length is correct? On Tue, 2009-07-14 at 10:56 +1000, Mark Andrews wrote: In message 4a5b1bdc.3090...@gis.net,

Re: DNSKEY Validation

2009-07-14 Thread Mark Elkins
On Tue, 2009-07-14 at 17:50 +1000, Mark Andrews wrote: In message 1247555725.13064.4.ca...@ilinux, Mark Elkins writes: OK - so I accept that the algorithm will change. What about some sort of validation of the base-64 part of the key? Is there a checksum byte/word? Is there a way of

Re: DNSKEY Validation

2009-07-13 Thread Danny Mayer
Stephane Bortzmeyer wrote: On Sun, Jul 12, 2009 at 08:42:27PM +0200, Mark Elkins m...@posix.co.za wrote a message of 31 lines which said: Arg 3 should be 5 (or maybe 3) - the algorithm. No, you must bnot use a hard-wired list in your code, because the list of algorithmps

Re: DNSKEY Validation

2009-07-13 Thread Mark Andrews
In message 4a5b1bdc.3090...@gis.net, Danny Mayer writes: Stephane Bortzmeyer wrote: On Sun, Jul 12, 2009 at 08:42:27PM +0200, Mark Elkins m...@posix.co.za wrote a message of 31 lines which said: Arg 3 should be 5 (or maybe 3) - the algorithm. No, you must bnot use a

Re: DNSKEY Validation

2009-07-12 Thread Stephane Bortzmeyer
On Sun, Jul 12, 2009 at 08:42:27PM +0200, Mark Elkins m...@posix.co.za wrote a message of 31 lines which said: Arg 3 should be 5 (or maybe 3) - the algorithm. No, you must bnot use a hard-wired list in your code, because the list of algorithmps registered at IANA can change. Can I