Re: [DNSOP] DNS vulnerabilities

Mark Andrews wrote:

>> Not necessarily. Some security protocol can safely assume
>> clocks of related equipments are manually managed by skilled
>> operators, which is not the case with DNS clients.
> 
> Most people are capable of setting the clocks on their laptops,
> phones and other portable equiment which all should be validating
> responses.  Most people are capable of setting clocks on their
> desktop machines which should be validating responses.

Because they have buttons and displays to do so, which is not
the case for a home router as a black box.

					Masataka Ohta
_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext