Re: [dnsext] afasterinternet.com trial and draft-vandergaast-edns-client-subnet-00

Tony Finch <dot@dotat.at> Thu, 01 September 2011 15:12 UTC

Return-Path: <fanf2@hermes.cam.ac.uk>
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65A5521F9900 for <dnsext@ietfa.amsl.com>; Thu, 1 Sep 2011 08:12:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.583
X-Spam-Level:
X-Spam-Status: No, score=-6.583 tagged_above=-999 required=5 tests=[AWL=0.016, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GK1+-rMLFmxb for <dnsext@ietfa.amsl.com>; Thu, 1 Sep 2011 08:12:12 -0700 (PDT)
Received: from ppsw-41.csi.cam.ac.uk (ppsw-41.csi.cam.ac.uk [131.111.8.141]) by ietfa.amsl.com (Postfix) with ESMTP id 44C5F21F9893 for <dnsext@ietf.org>; Thu, 1 Sep 2011 08:12:11 -0700 (PDT)
X-Cam-AntiVirus: no malware found
X-Cam-SpamDetails: not scanned
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-2.csi.cam.ac.uk ([131.111.8.54]:48339) by ppsw-41.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.156]:25) with esmtpa (EXTERNAL:fanf2) id 1Qz8xU-0002sX-Sb (Exim 4.72) (return-path <fanf2@hermes.cam.ac.uk>); Thu, 01 Sep 2011 16:13:36 +0100
Received: from fanf2 (helo=localhost) by hermes-2.csi.cam.ac.uk (hermes.cam.ac.uk) with local-esmtp id 1Qz8xU-0006fI-RP (Exim 4.67) (return-path <fanf2@hermes.cam.ac.uk>); Thu, 01 Sep 2011 16:13:36 +0100
Date: Thu, 01 Sep 2011 16:13:36 +0100
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-2.csi.cam.ac.uk
To: Marc Lampo <marc.lampo@eurid.eu>
In-Reply-To: <004201cc6878$39116fb0$ab344f10$@lampo@eurid.eu>
Message-ID: <alpine.LSU.2.00.1109011608150.30178@hermes-2.csi.cam.ac.uk>
References: <20110830162134.GB84494@shinkuro.com> <004201cc6878$39116fb0$ab344f10$@lampo@eurid.eu>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: Tony Finch <fanf2@hermes.cam.ac.uk>
Cc: dnsext@ietf.org, draft-vandergaast-edns-client-subnet@tools.ietf.org
Subject: Re: [dnsext] afasterinternet.com trial and draft-vandergaast-edns-client-subnet-00
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Sep 2011 15:12:13 -0000

Marc Lampo <marc.lampo@eurid.eu> wrote:
>
> For an authoritative name server, implementing DNSSEC and this RFC,
> it probably implies that it must be able to calculate RRSIG's "on the
> fly";

That isn't required. You can pre-calculate RRSIGs for multiple versions of
the same RRset and arrange your stunt DNS server to serve up the most
optimal version of the RRset depending on the client. No need for dynamic
calculation.

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
Lundy, Fastnet: Southeast veering southwest 3 or 4, increasing 5 at times.
Slight or moderate. Showers. Good, occasionally poor.