IETF Logo Mail Archive

Re: OFFTOPIC: DNSSEC groupthink versus improving DNS

Mark Andrews <Mark_Andrews@isc.org> Fri, 08 August 2008 04:58 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DB1FA3A6C86; Thu, 7 Aug 2008 21:58:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.513
X-Spam-Level:
X-Spam-Status: No, score=-2.513 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EfnNN2O2n9Vc; Thu, 7 Aug 2008 21:58:34 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id DB1853A6BF8; Thu, 7 Aug 2008 21:56:40 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1KRJxk-0005xE-21 for namedroppers-data@psg.com; Fri, 08 Aug 2008 04:52:28 +0000
Received: from [2001:470:1f00:820:214:22ff:fed9:fbdc] (helo=drugs.dv.isc.org) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69 (FreeBSD)) (envelope-from <marka@isc.org>) id 1KRJxg-0005wd-4q for namedroppers@ops.ietf.org; Fri, 08 Aug 2008 04:52:26 +0000
Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.14.2/8.14.2) with ESMTP id m784q46m007017; Fri, 8 Aug 2008 14:52:04 +1000 (EST) (envelope-from marka@drugs.dv.isc.org)
Message-Id: <200808080452.m784q46m007017@drugs.dv.isc.org>
To: Duane <duane@e164.org>
Cc: Paul Vixie <vixie@isc.org>, Olaf Kolkman <olaf@NLnetLabs.nl>, bert hubert <bert.hubert@netherlabs.nl>, Namedroppers <namedroppers@ops.ietf.org>
From: Mark Andrews <Mark_Andrews@isc.org>
Subject: Re: OFFTOPIC: DNSSEC groupthink versus improving DNS
In-reply-to: Your message of "Fri, 08 Aug 2008 14:17:54 +1000." <489BC8F2.3040204@e164.org>
Date: Fri, 08 Aug 2008 14:52:04 +1000
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>

> Mark Andrews wrote:
> >> Mark Andrews wrote:
> >>
> >>> Validation in off machine caches is only there for the legacy machines.
> >> That's always going to be an issue unless you can get all parties to
> >> implement something better.
> > 
> > Well every PC owner can do this today.  It is not that hard to setup
> > a on machine validating caching server and to configure the PC to use
> > it.
> 
> Ok so you're saying these people that get suckered by internet/email
> scams would be capable of setting this up properly?

People setup caching servers everyday today.  Setting up one to
also do validation is not that much extra.  

> > It's only administative inertia that stops people doing it today.
> 
> No, there is a lot more to it than that, most people don't understand
> internet security, you know it's bad when most people get warm fuzzy
> feelings over actions taken to make them feel secure, when the reality
> is so far from the truth it's not funny.

And education is the solution to that.
 
People aren't as stupid as we often portray then as.  Give them
good information and they will use it.  Do best practice from the
start.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews@isc.org

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>

v2.23.0 | Report a Bug | By Email