[DNSOP] DS vs DNSKEY trust anchors, was Re: Truncation...

2009-03-11 Thread Edward Lewis
At 8:19 +1100 3/11/09, Mark Andrews wrote: In message a06240804c5dc2ddef...@[10.31.200.116], Edward Lewis writes: record involves less typing than a DNSKEY, I'd want to work with a DS record. Has anyone on this list ever typed in a DNSKEY or DS as a trust anchor? I would

Re: [DNSOP] DS vs DNSKEY trust anchors, was Re: Truncation...

2009-03-11 Thread Mark Andrews
In message a06240800c5dd7e5f2...@[10.31.200.116], Edward Lewis writes: At 8:19 +1100 3/11/09, Mark Andrews wrote: In message a06240804c5dc2ddef...@[10.31.200.116], Edward Lewis writes: record involves less typing than a DNSKEY, I'd want to work with a DS record. Has anyone on

Re: [DNSOP] DS vs DNSKEY trust anchors, was Re: Truncation...

2009-03-11 Thread Joe Baptista
You poor souls. The DNSSEC monster is vast and complex. So much easier just to fix the problem instead of this endless gibberish. It's so complex it's funny when you consider a simple solution like DNSCURVE - http://dnscurve.org/ - and so much more secure. No man in the middle issues. Oh well

Re: [DNSOP] DS vs DNSKEY trust anchors, was Re: Truncation...

2009-03-11 Thread Ralf Weber
Moin! On 12.03.2009, at 01:10, Joe Baptista wrote: You poor souls. The DNSSEC monster is vast and complex. So much easier just to fix the problem instead of this endless gibberish. It's so complex it's funny when you consider a simple solution like DNSCURVE -http://dnscurve.org/ - and