Re: Machine Identity

[Keith Moore <[e-mail]>]

Dave Crocker wrote:
> 
> 
> Keith Moore wrote:
>> Dave Crocker wrote:
>>>    Why isn't a Domain Name sufficient to the purpose you have in mind?
>> the usual reason is that there's a disconnect between the domain name 
>> and the host or the app.  the host owner doesn't control the DNS zone 
>> for his host.  instead, it's under the control of a network admin 
>> somewhere.  this leads to any number of failures, e.g.  there is no 
>> stable name that is bound to the host, or the name-to-address bindings 
>> can't be maintained in an up-to-date fashion.
> 
> 
> That implies a considerable number of assertions about the alternative 
> that were not stated.
> 
> This realm is marked by massive leaps of unstated requirements faith, 
> ten which  to result in talking past each other.
> 
> That's why I asked Stephane to clarify exactly what requirements he is 
> trying to satisfy.
> 
> The rest of us would merely be guessing.

well, I generally think that IETF exists to solve general problems, 
rather than an individual's specific problems.

Keith