Re: DNSCurve implementation

I advise against getting DNSCurve from zinq, or OpenDNS.

I've been busy with other matters, but I'll try to collect clean patches
in one place.

As most of you already know:

It appears, after some efforts to find out, that [email protected] is
just gmail sockpuppet, with no physical address, no phone, no registered
domains, No posts outside the djbdns and qmail lists, and those fairly
recently. Nothing to link this Persona with a real person.  All leads
are a dead end.

This would be ok, if they were just posting email or whistleblowing, but
[email protected] is the project manager of a version of djbdns that is
connected to the Vixie/Kaminsky Cache Poisoning scam through dubious
changes advanced by Kaminsky & Kevin Day that seem to negatively affect
the security of djbdns. The security of DJBDNS before their changes was
not in question, so the change is gratuitous at best.

I suspect that this persona is a sockpuppet for one or more of:  
Matthew Dempsky, Kevin Day, and/or Dan Kaminsky.  And it turns out
Dempsky is now linked to OpenDNS. Curiouser and curiouser, but once
again it narrows down to the same group of people.

DNS software is critical infrastructure software, and getting such
software, with dubious modifications, from anonymous sources is probably
not something that I think most people would consider to be good
judgment.

		--Dean

On Thu, 25 Feb 2010, Mark Johnson wrote:

> On Thu, Feb 25, 2010 at 4:00 AM, Laurent Bercot <[email protected]> wrote:
> >  What do we have today ?
> 
> Matthew Dempsky has published DNSCurve patches for dnscache.  I
> managed to integrate those into my fork and build a dnscache that
> could talk to the DNSCurve forwarder he has running.  Check the NS
> records for dempsky.org, you'll see that one is DNSCurve enabled
> (forwarder in front of tinydns).  I don't believe he has yet published
> the DNSCurve forwarder, at least not a cleaned up version ready for
> widespread deployment.  Note that to use the patches, you need to
> build NaCl (libnacl.a).
> 
> 

-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 256 5494