Re: dnscurve updates

On Sun, Jul 5, 2009 at 7:54 PM, Bradley D. Thornton<[email protected]> wrote:
> Besides, and although I'm a big fan of DNSCurve myself, it hasn't reached a
> maturity level yet wrt standardized implementation that lends itself to
> widespread implementation by software vendors who want to do it once without
> having to tear out the kitchen sink and make changes once the standards
> migrate/evolve into substantially something else.

I think DNSCurve has been very architecturally stable.  The two
"major" (and fairly early) changes that come to mind are adding the
streamlined packet format and increasing the nonce size (and thus
cipher suite).  As someone who has updated prototype implementations
based on earlier specs to the current one, these were both very easy
changes to implement.

The only changes in the last few months have been clarifications to
the text and changes to make TXT format packets more robust against
middleware boxes that mangle DNS packets (e.g., being more explicit
about what bytes a cache should send in a query vs. what bytes a
forwarder should allow in a query).

There have certainly been no changes that required an implementer to
"tear out the kitchen sink." :)