Re: draft-arends-dnsnr-00

Roy Arends <roy@dnss.ec> Sat, 24 July 2004 08:30 UTC

Date: Sat, 24 Jul 2004 10:27:58 +0200
From: Roy Arends <roy@dnss.ec>
To: Paul Vixie <paul@vix.com>
Cc: namedroppers@ops.ietf.org
Subject: Re: draft-arends-dnsnr-00
In-Reply-To: <20040724000524.CFDD013DF4@sa.vix.com>
Message-ID: <Pine.BSO.4.56.0407241026000.18570@trinitario.schlyter.se>
References: <20040724000524.CFDD013DF4@sa.vix.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk

On Sat, 24 Jul 2004, Paul Vixie wrote:

> > If _you_ state that _you_ signed record type AAAA and record type MX for a
> > given name, while not actually signing record type AAAA and record type
> > MX, that would be violating the spec.
>
> thanks for bringing the discussion back to what i think is the main point.
> roy, can you explain what happens when someone hears a response that has
> various permutations of this spec-violation, or when a man-in-the-middle
> removes or replays (but doesn't forge or modify) any or each of these
> records.

No problem, will do.

Roy


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>