Re: Another NEW technical argument for Opt-In.

["Olaf M. Kolkman" <[e-mail]>]

On Mon, 11 Mar 2002 12:17:40 +0100 (CET)
Roy Arends <[e-mail]> wrote:


> Can you state the _operational_ arguments for 'restrict opt-in to
> delagations only' ?  That was I was looking for !

http://ops.ietf.org/lists/namedroppers/namedroppers.2002/msg00104.html and
other messages.

Abstract: Introducing granularity of security will make troubleshooting
verifiers harder. One moves the burden away from the servers to the
clients.

I am afraid that we will follow a path where end users cannot be
bothered to set up verifying resolvers since only the www.bla.foos in the
world are signed and the costs of maintaining is just to
high.

I realize these are not the strongest argument so I do  not want to be
orthodox about them. However, I still wonder why the original designers
choose to work with the concept of secure zones instead of secure names.


--------------------------------------------| Olaf M. Kolkman
                                            | www.ripe.net/disi


--
to unsubscribe send a message to [e-mail] with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>