Re: 9 reasons for dynamic authorization records

On 2004-02-12, at 20.16, Hadmut Danisch wrote:

> * Current DNS based proposals make it difficult to verify
>   the full e-mail address and not just the domain part.
>
>   E.g. a company with 5,000 employees or ISPs with 50,000 customers
>   would have to update their zone file every second if the wanted
>   to support their traveling employees/customers. And you don't want
>   to have zone files with 50,000 entries. The DNS synchronization
>   mechanism between primary and secondary does not support this
>   (i.e. only latest versions support differential updates).

(a) What is the problem with updating the zonefile every second? I 
don't see any problems at all with it. If you said 100 times a second, 
sure, then we can talk about potential issues, but once?

(b) You seem to think, or I have missed something, that the end user is 
sending things directly from wherever they are on the network? As Alan 
said, there are two correct solutions for this: A VPN connection to the 
"home network" or use of SMTP AUTH with an outgoing relay-MTA which is 
at a fixed point in the world (in the "home network").

You seems to definitely have a very very special network design which 
you use for this and other arguments of yours, and it seems people 
don't agree with that design.

     Regards, Patrik