Re: Machine Identity

Keith Moore <moore@network-heretics.com> Tue, 26 February 2008 18:50 UTC

Return-Path: <discuss-bounces@ietf.org>
X-Original-To: ietfarch-discuss-archive@core3.amsl.com
Delivered-To: ietfarch-discuss-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 586F53A6CCB; Tue, 26 Feb 2008 10:50:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.498
X-Spam-Level:
X-Spam-Status: No, score=-1.498 tagged_above=-999 required=5 tests=[AWL=1.101, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E3+DYmiqwlJH; Tue, 26 Feb 2008 10:50:55 -0800 (PST)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2BFBC28C27F; Tue, 26 Feb 2008 10:50:55 -0800 (PST)
X-Original-To: discuss@core3.amsl.com
Delivered-To: discuss@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4DA5128C27F for <discuss@core3.amsl.com>; Tue, 26 Feb 2008 10:50:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2h9iQj5i-wI0 for <discuss@core3.amsl.com>; Tue, 26 Feb 2008 10:50:53 -0800 (PST)
Received: from m1.imap-partners.net (m1.imap-partners.net [64.13.152.131]) by core3.amsl.com (Postfix) with ESMTP id 616D03A6CCB for <discuss@apps.ietf.org>; Tue, 26 Feb 2008 10:50:53 -0800 (PST)
Received: from lust.indecency.org (user-119b1dm.biz.mindspring.com [66.149.133.182]) by m1.imap-partners.net (MOS 3.8.4-GA) with ESMTP id AMW08460 (AUTH admin@network-heretics.com) for discuss@apps.ietf.org; Tue, 26 Feb 2008 10:50:44 -0800 (PST)
Message-ID: <47C45F83.7010705@network-heretics.com>
Date: Tue, 26 Feb 2008 13:50:43 -0500
From: Keith Moore <moore@network-heretics.com>
User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031)
MIME-Version: 1.0
To: dcrocker@bbiw.net
Subject: Re: Machine Identity
References: <20080226130527.GA1404@generic-nic.net> <47C45C52.8010705@dcrocker.net>
In-Reply-To: <47C45C52.8010705@dcrocker.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: discuss@apps.ietf.org
X-BeenThere: discuss@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: general discussion of application-layer protocols <discuss.ietf.org>
List-Unsubscribe: <http://www.ietf.org/mailman/listinfo/discuss>, <mailto:discuss-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:discuss@ietf.org>
List-Help: <mailto:discuss-request@ietf.org?subject=help>
List-Subscribe: <http://www.ietf.org/mailman/listinfo/discuss>, <mailto:discuss-request@ietf.org?subject=subscribe>
Sender: discuss-bounces@ietf.org
Errors-To: discuss-bounces@ietf.org

Dave Crocker wrote:
> I feel obligated to ask an obvious question:
> 
>    Why isn't a Domain Name sufficient to the purpose you have in mind?
> 

the usual reason is that there's a disconnect between the domain name 
and the host or the app.  the host owner doesn't control the DNS zone 
for his host.  instead, it's under the control of a network admin 
somewhere.  this leads to any number of failures, e.g.  there is no 
stable name that is bound to the host, or the name-to-address bindings 
can't be maintained in an up-to-date fashion.

Keith