Re: Forgery resilience: straw man proposal
Alex Bligh <alex@alex.org.uk> Wed, 30 July 2008 09:22 UTC
Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CE8B63A6BC7; Wed, 30 Jul 2008 02:22:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.345
X-Spam-Level:
X-Spam-Status: No, score=-0.345 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GetLeJvLXNyP; Wed, 30 Jul 2008 02:22:24 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 0F5E83A6B9A; Wed, 30 Jul 2008 02:22:24 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KO7og-000FY3-CQ for namedroppers-data@psg.com; Wed, 30 Jul 2008 09:17:54 +0000
Received: from [217.147.82.63] (helo=mail.avalus.com) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from <alex@alex.org.uk>) id 1KO7oc-000FXa-Sa for namedroppers@ops.ietf.org; Wed, 30 Jul 2008 09:17:52 +0000
Received: from [192.168.100.3] (localhost [127.0.0.1]) by mail.avalus.com (Postfix) with ESMTP id A2BF2C2DAB; Wed, 30 Jul 2008 10:17:48 +0100 (BST)
Date: Wed, 30 Jul 2008 10:17:43 +0100
From: Alex Bligh <alex@alex.org.uk>
Reply-To: Alex Bligh <alex@alex.org.uk>
To: Alex Bligh <alex@alex.org.uk>, namedroppers@ops.ietf.org
cc: Alex Bligh <alex@alex.org.uk>
Subject: Re: Forgery resilience: straw man proposal
Message-ID: <8979D3CEC4ABCD6DE0C47320@Ximines.local>
In-Reply-To: <429776829478B32E1ED8DF85@Ximines.local>
References: <429776829478B32E1ED8DF85@Ximines.local>
X-Mailer: Mulberry/4.0.8 (Mac OS X)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
--On 30 July 2008 10:14:17 +0100 Alex Bligh <alex@alex.org.uk> wrote: > 1. Use IPsec AH in transport mode between the stub resolver and the > recursive nameserver. This provides authentication of the recursive > nameserver to the stub resolver (see below), integrity protection, > replay protection and (as an unneeded bonus I think) non-repudiation. I should have added that it does not suffer the computational overhead of requiring encryption/decryption at each end. Alex -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://ops.ietf.org/lists/namedroppers/>
- Re: Forgery resilience: straw man proposal Alex Bligh
- Forgery resilience: straw man proposal Alex Bligh