Re: [dane] Anyone interested in writing a DANE tutorial?

Phil Regnauld <regnauld@nsrc.org> Mon, 15 April 2013 16:42 UTC

Return-Path: <regnauld@x0.dk>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 998C121F9311 for <dane@ietfa.amsl.com>; Mon, 15 Apr 2013 09:42:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.999
X-Spam-Level:
X-Spam-Status: No, score=-0.999 tagged_above=-999 required=5 tests=[BAYES_50=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FgWth+eovTeB for <dane@ietfa.amsl.com>; Mon, 15 Apr 2013 09:42:52 -0700 (PDT)
Received: from moof.catpipe.net (moof.catpipe.net [194.28.252.64]) by ietfa.amsl.com (Postfix) with ESMTP id 036E321F91A0 for <dane@ietf.org>; Mon, 15 Apr 2013 09:42:51 -0700 (PDT)
Received: from localhost (moof.catpipe.net [194.28.252.64]) by localhost.catpipe.net (Postfix) with ESMTP id A0BA14CE96B; Mon, 15 Apr 2013 18:42:49 +0200 (CEST)
Received: from moof.catpipe.net ([194.28.252.64]) by localhost (moof.catpipe.net [194.28.252.64]) (amavisd-new, port 10024) with ESMTP id HgVkfobdhqkL; Mon, 15 Apr 2013 18:42:49 +0200 (CEST)
Received: from macbook.bluepipe.net (105-236-165-158.access.mtnbusiness.co.za [105.236.165.158]) (Authenticated sender: relayuser) by moof.catpipe.net (Postfix) with ESMTPA id C66644CE969; Mon, 15 Apr 2013 18:42:48 +0200 (CEST)
Received: by macbook.bluepipe.net (Postfix, from userid 1001) id 1E4853E3EF9; Mon, 15 Apr 2013 18:42:47 +0200 (SAST)
Date: Mon, 15 Apr 2013 18:42:47 +0200
From: Phil Regnauld <regnauld@nsrc.org>
To: Christian Heutger <ch@psw.net>
Message-ID: <20130415164247.GD28519@macbook.bluepipe.net>
References: <516BFBE9.5010509@hermes.nic.fr> <CD91D2DE.416D2%ch@psw.mx>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CD91D2DE.416D2%ch@psw.mx>
X-Operating-System: Darwin 12.3.0 x86_64
User-Agent: Mutt/1.5.21 (2010-09-15)
X-Mailman-Approved-At: Mon, 15 Apr 2013 11:07:12 -0700
Cc: Sandoche Balakrichenan <sandoche.balakrichenan@nic.fr>, "Mohsen.Souissi@afnic.fr" <Mohsen.Souissi@afnic.fr>, Niall O'Reilly <Niall.oReilly@ucd.ie>, "dane@ietf.org" <dane@ietf.org>
Subject: Re: [dane] Anyone interested in writing a DANE tutorial?
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Apr 2013 16:42:52 -0000

Christian Heutger (ch) writes:
> Hi,
> 
> I'm new to this, but doesn't DANE improve the CA trust model instead
> of replacing it?

	It can do both, that is up to the owner of the zone to decide.

	Cheers,
	Phil