Re: Authenticated denial of existence...

Ted Lemon <[email protected]> wrote:

> Is this on anyone's radar?   What are your thoughts about it?
>
> https://datatracker.ietf.org/doc/draft-gieben-auth-denial-of-existence-dns/

A really nice and helpful document.

A suggestion:

It should discuss RFC 4470 Minimally Covering NSEC Records, and the
related idea of NSEC3 "white lies" implemented by Dan Kaminsky's
Phreebird. (I can't immediately find a good description of how the latter
works.) Both these require on-demand synthesizing and signing of negative
responses, whereas the mechanisms that Miek's draft currently covers are
all designed for serving from a pre-signed zone file without requiring
online private keys.

Tony.
-- 
f.anthony.n.finch  <[email protected]>  http://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.
_______________________________________________
dnsext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsext