Re: dnscurve updates

On Mon, Jul 6, 2009 at 1:41 AM, Matthew Dempsky<[email protected]> wrote:
> I think DNSCurve has been very architecturally stable.  The two
> "major" (and fairly early) changes that come to mind are adding the
> streamlined packet format and increasing the nonce size (and thus
> cipher suite).  As someone who has updated prototype implementations
> based on earlier specs to the current one, these were both very easy
> changes to implement.
>
> The only changes in the last few months have been clarifications to
> the text and changes to make TXT format packets more robust against
> middleware boxes that mangle DNS packets (e.g., being more explicit
> about what bytes a cache should send in a query vs. what bytes a
> forwarder should allow in a query).
>
> There have certainly been no changes that required an implementer to
> "tear out the kitchen sink." :)

So, who's going to be the first to put all the nameservers for a real
domain behind your DNSCurve forwarder?  That would be a big vote of
confidence.  Dare you to try that with dempsky.org.  8)