Re: [dnsext] DTLS alternative to DNS-Curve

Paul Vixie <vixie@isc.org> Fri, 17 September 2010 05:58 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4CAAB3A69CB; Thu, 16 Sep 2010 22:58:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.5
X-Spam-Level:
X-Spam-Status: No, score=-2.5 tagged_above=-999 required=5 tests=[AWL=0.099, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HAhPs6+EZp-u; Thu, 16 Sep 2010 22:58:13 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id BA5AB3A6A40; Thu, 16 Sep 2010 22:57:51 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.72 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1OwTtb-0004sl-T2 for namedroppers-data0@psg.com; Fri, 17 Sep 2010 05:54:03 +0000
Received: from [2001:4f8:3:bb:230:48ff:fe5a:2f38] (helo=nsa.vix.com) by psg.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.72 (FreeBSD)) (envelope-from <vixie@vix.com>) id 1OwTtZ-0004sI-Hv for namedroppers@ops.ietf.org; Fri, 17 Sep 2010 05:54:01 +0000
Received: from nsa.vix.com (localhost [127.0.0.1]) by nsa.vix.com (Postfix) with ESMTP id 4D80EA1072 for <namedroppers@ops.ietf.org>; Fri, 17 Sep 2010 05:54:01 +0000 (UTC) (envelope-from vixie@nsa.vix.com)
From: Paul Vixie <vixie@isc.org>
To: namedroppers <namedroppers@ops.ietf.org>
Subject: Re: [dnsext] DTLS alternative to DNS-Curve
In-Reply-To: Your message of "Thu, 16 Sep 2010 19:26:08 +0100." <alpine.LSU.2.00.1009161925200.31356@hermes-2.csi.cam.ac.uk>
References: <AANLkTin2xY+cAck+3sWcn8hibDrZbXLzttznGM9sRQz+@mail.gmail.com> <alpine.LSU.2.00.1009161925200.31356@hermes-2.csi.cam.ac.uk>
X-Mailer: MH-E 8.1; nil; GNU Emacs 23.1.1
Date: Fri, 17 Sep 2010 05:54:01 +0000
Message-ID: <93378.1284702841@nsa.vix.com>
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

> Date: Thu, 16 Sep 2010 19:26:08 +0100
> From: Tony Finch <dot@dotat.at>
> 
> On Thu, 16 Sep 2010, Phillip Hallam-Baker wrote:
> >
> > TSIG is much closer to what I want. All I really want is either TSIG plus a
> > key exchange mechanism or TSIG plus confidentiality plus a key exchange
> > mechanism.
> 
> TKEY is DNS's key exchange mechanism.

http://www.ops.ietf.org/lists/namedroppers/namedroppers.2008/msg01002.html