Re: [Add] "primary control over DNS routing should lie with..."

Rob Sayre <sayrer@gmail.com> Mon, 27 July 2020 20:55 UTC

MIME-Version: 1.0
References: <159466897500.14799.423774862197475126@ietfa.amsl.com> <1776930.eNfv2hk2N7@linux-9daj> <CAChr6Szfx3-tDzFUjLBGnvZyOdcptmsSH_nDBgF58aQSwTL8rA@mail.gmail.com> <4563444.M2OsY2uYO4@linux-9daj>
In-Reply-To: <4563444.M2OsY2uYO4@linux-9daj>
From: Rob Sayre <sayrer@gmail.com>
Date: Mon, 27 Jul 2020 13:55:02 -0700
Message-ID: <CAChr6SyG5psGR+PfBTV9R08RfWvysqPiW6D5erDQNBRqDOgsDQ@mail.gmail.com>
To: Paul Vixie <paul@redbarn.org>
Cc: ADD Mailing list <add@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000000546f905ab728a45"
Archived-At: <https://mailarchive.ietf.org/arch/msg/add/YuHx2xlPHf6wBhHwXoNonS7dzFc>
Subject: Re: [Add] "primary control over DNS routing should lie with..."
Precedence: list

On Mon, Jul 27, 2020 at 1:51 PM Paul Vixie <paul@redbarn.org> wrote:

> On Monday, 27 July 2020 15:26:00 UTC Rob Sayre wrote:
> > On Mon, Jul 27, 2020 at 12:54 AM Paul Vixie <paul@redbarn.org> wrote:
> > > i beg you, please remember that i'm not talking about public-access
> > > networks where the end users are receiving connectivity as a service.
> > > rather, networks operated by the owner of all the devices plugged
> > > into them. we are legion.
> >
> > I'd suggest using management software.
>
> since intruders, malware, poisoned supply chains, and BYOD will not be
> participating in "management software", that recommendation is off-topic.
> a
> network which is only as secure as its least-secure node is _not secure_.
>

It doesn't seem like your idea of "security" aligns with IETF consensus.

thanks,
Rob

[Add] Fwd: New Version Notification for draft-sch… Nick Sullivan
Re: [Add] New Version Notification for draft-schi… Tommy Pauly
Re: [Add] New Version Notification for draft-schi… David Schinazi
[Add] "primary control over DNS routing should li… Paul Vixie
Re: [Add] "primary control over DNS routing shoul… Rob Sayre
Re: [Add] "primary control over DNS routing shoul… Adam Roach
Re: [Add] "primary control over DNS routing shoul… Ted Lemon
Re: [Add] "primary control over DNS routing shoul… Rob Sayre
Re: [Add] New Version Notification for draft-schi… Tommy Pauly
Re: [Add] "primary control over DNS routing shoul… Paul Vixie
Re: [Add] "primary control over DNS routing shoul… Rob Sayre
Re: [Add] New Version Notification for draft-schi… Andrew Campling
Re: [Add] New Version Notification for draft-schi… David Schinazi
Re: [Add] "primary control over DNS routing shoul… Paul Vixie
Re: [Add] "primary control over DNS routing shoul… Rob Sayre
Re: [Add] "primary control over DNS routing shoul… Paul Vixie
Re: [Add] "primary control over DNS routing shoul… Rob Sayre
Re: [Add] "primary control over DNS routing shoul… Tony Rutkowski
Re: [Add] "primary control over DNS routing shoul… Rob Sayre
Re: [Add] "primary control over DNS routing shoul… Deen, Glenn (NBCUniversal)
Re: [Add] "primary control over DNS routing shoul… Rob Sayre
Re: [Add] "primary control over DNS routing shoul… Steffen Nurpmeso