Re: self-KEY check

-----BEGIN PGP SIGNED MESSAGE-----


| From: Michael Richardson <[email protected]>

| DHR, do you perhaps lookup the self-KEY for EACH OE connection that you do?

Yes, pluto does this.

| While local DNS makes this okay-ish, it is still very wasteful!

Premature optimization is the root of all evil.

Cache coherency is always a problem -- let's have one cache (in the
DNS).

Cache retention policy is tricky.  Why not leave it to the
well-defined point of implementation, DNS.

If we observe a realistic performance problem, then it is time to
reconsider.

Hugh Redelmeier
[email protected]  voice: +1 416 482-8253

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCUAwUBPm2e3MFAuQPManGZAQHnXAP2PeXkKbIOghim12TQdzx1CwiI+7MY3yq7
HJS8b2RqdnswloWpmx7YtRn8F4oy01Cems29XOzQQmsYd7WrSGt1hIvPxJFms4gY
vRf0zVjntrAoxUa8HsqWbbmDG1xIR9z/FF5iFKJ4ZpVCkjy7sfrwdfdRVsElfSGq
SrEdbVELFA==
=EVyG
-----END PGP SIGNATURE-----