Re: OFFTOPIC: DNSSEC groupthink versus improving DNS

Duane <duane@e164.org> Fri, 08 August 2008 02:59 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8598E3A685C; Thu, 7 Aug 2008 19:59:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.495
X-Spam-Level:
X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GC0ghIefKB76; Thu, 7 Aug 2008 19:59:11 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id AA73F3A635F; Thu, 7 Aug 2008 19:59:11 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KRI86-000JKY-M6 for namedroppers-data@psg.com; Fri, 08 Aug 2008 02:55:02 +0000
Received: from [208.82.100.153] (helo=mail.aus-biz.com) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <duane@e164.org>) id 1KRI83-000JJo-2o for namedroppers@ops.ietf.org; Fri, 08 Aug 2008 02:55:00 +0000
Received: from [192.168.100.244] (dsl-48-19.qld1.net.au [125.168.48.19]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.aus-biz.com (Postfix) with ESMTPSA id E0F49FF26C; Fri, 8 Aug 2008 12:54:59 +1000 (EST)
Message-ID: <489BB57C.80001@e164.org>
Date: Fri, 08 Aug 2008 12:54:52 +1000
From: Duane <duane@e164.org>
User-Agent: Thunderbird 2.0.0.16 (X11/20080724)
MIME-Version: 1.0
To: Paul Vixie <vixie@isc.org>
CC: bert hubert <bert.hubert@netherlabs.nl>, Namedroppers <namedroppers@ops.ietf.org>
Subject: Re: OFFTOPIC: DNSSEC groupthink versus improving DNS
References: <489AD5E3.20708@nlnetlabs.nl> <20080807134236.GA19024@outpost.ds9a.nl> <489B09FE.8050701@e164.org> <49451.1218124457@nsa.vix.com> <489B98FA.40307@e164.org> <26046.1218159498@nsa.vix.com>
In-Reply-To: <26046.1218159498@nsa.vix.com>
X-Enigmail-Version: 0.95.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>

Paul Vixie wrote:
> duane, if your point is that dnssec is horrid misshapen pig that even
> its mother could not love, then you will find noone (anywhere) willing
> to argue otherwise.  it's late, it's ugly, it's fragile, it's a pig,
> and that's the universal view of it, there are no dissenters.

No arguments here.

> but having ridden the whole ride and having seen victory declared several
> times, i am in the "it can be made to work in its present form without any
> more flag days" camp.  call that groupthink if you must, say what you want
> about me, but say also that i hate dnssec but plan to deploy it anyway.

I most sincerely apologise if I made any person comment to or about you
that most certainly was not my intention. I like everyone else want a
solution to this and other problems with DNS but for a number of reasons
I don't like the form it's taken in DNSSEC.

I'm trying to stick to the non-political factual reasons for my concerns
over it, however it wouldn't be terribly difficult to figure out other
concerns I have with it.

-- 

Best regards,
 Duane

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>