Re: DNSSEC and SSL

2010-08-23 Thread Jakob Schlyter
On 23 aug 2010, at 16.35, Tony Finch wrote: Unbound is a full service resolver not a stub resolver. depending on configuration, unbound can be used as both a full service resolve and a stub. jakob

Re: DNSSEC and SSL

2010-08-22 Thread Jakob Schlyter
On 22 aug 2010, at 03.00, ML wrote: Would a future with a ubiquitous DNSSEC deployment eliminate the market for commercial CAs? Would functioning DNSSEC + self signed certs be more secure/trustworthy than our current system of trusted CAs chosen by OS/browser developers? For DV (domain

Re: Mail Submission Protocol

2010-04-21 Thread Jakob Schlyter
On 21 apr 2010, at 16.14, Leen Besselink wrote: We added SSL to our SMTP-service and tell our customers to use SSL (not TLS) with authentication and have the mailserver listen on the TCP-ports which the mailclients pick for that (of which their are a few if I'm not mistaken). Assuming that