[DNSOP] Re: DNSOPQName Minimization vs Aggressive NSEC vs En crypted and Authenticated DNS vs Serve Stale vs DNSSEC vs LocalRo ot
"John Levine" <[email protected]>
| Newsgroups | gmane.ietf.dnsop |
|---|---|
| Organization | Taughannock Networks |
| Message-ID | <[email protected]> |
According to Wes Hardaker <[email protected]>: >George Michaelson <[email protected]> writes: > >> > It seems that the answer is yes because root operators participate in DITL. >> >> I struggle to see a cause-and-effect from DITL to trust or probity. > >I think he was treating DITL as a measuring stick: because potentially >sensitive queries for NXDOMAIN TLDs leak to the root, you can measure >that leakage (and privacy concerns within DITL). Queries leak all over the place. Verisign sees all of the .com and .net typos, which I presume they log and analyze but they're not telling what they do with them, beyond the obvious limits from their ICANN contracts. I agree this draft is useful but I also don't think that people should overestimate both what it describes, and the limits of what localroot et all can mitigate. R's, John -- Regards, John Levine, [email protected], Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]