Re: Machine Identity

[Dave Crocker <[e-mail]>]

Keith Moore wrote:
> Dave Crocker wrote:
>>    Why isn't a Domain Name sufficient to the purpose you have in mind?
> the usual reason is that there's a disconnect between the domain name 
> and the host or the app.  the host owner doesn't control the DNS zone 
> for his host.  instead, it's under the control of a network admin 
> somewhere.  this leads to any number of failures, e.g.  there is no 
> stable name that is bound to the host, or the name-to-address bindings 
> can't be maintained in an up-to-date fashion.


That implies a considerable number of assertions about the alternative that were 
not stated.

This realm is marked by massive leaps of unstated requirements faith, ten which 
  to result in talking past each other.

That's why I asked Stephane to clarify exactly what requirements he is trying to 
satisfy.

The rest of us would merely be guessing.

d/

-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net