IETF Logo Mail Archive

Re: [dnsext] stub validation

Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp> Mon, 25 October 2010 05:07 UTC

Return-Path: <owner-namedroppers@ops.ietf.org>
X-Original-To: ietfarch-dnsext-archive@core3.amsl.com
Delivered-To: ietfarch-dnsext-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7B7643A680A; Sun, 24 Oct 2010 22:07:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.09
X-Spam-Level:
X-Spam-Status: No, score=-0.09 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NChsIOj8JHqf; Sun, 24 Oct 2010 22:07:50 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 7FEC53A67DB; Sun, 24 Oct 2010 22:07:50 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.72 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1PAFEQ-00015z-Tx for namedroppers-data0@psg.com; Mon, 25 Oct 2010 05:04:26 +0000
Received: from necom830.hpcl.titech.ac.jp ([131.112.32.132]) by psg.com with smtp (Exim 4.72 (FreeBSD)) (envelope-from <mohta@necom830.hpcl.titech.ac.jp>) id 1PAFEO-00015j-2K for namedroppers@ops.ietf.org; Mon, 25 Oct 2010 05:04:24 +0000
Received: (qmail 94886 invoked from network); 25 Oct 2010 05:30:30 -0000
Received: from p16136-ipbffx02marunouchi.tokyo.ocn.ne.jp (HELO ?192.168.0.75?) (221.189.115.136) by necom830.hpcl.titech.ac.jp with SMTP; 25 Oct 2010 05:30:30 -0000
Message-ID: <4CC50F8B.4030900@necom830.hpcl.titech.ac.jp>
Date: Mon, 25 Oct 2010 14:03:07 +0900
From: Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; ja; rv:1.9.2.11) Gecko/20101013 Thunderbird/3.1.5
MIME-Version: 1.0
To: Phillip Hallam-Baker <hallam@gmail.com>
CC: Paul Vixie <vixie@isc.org>, "namedroppers@ops.ietf.org" <namedroppers@ops.ietf.org>
Subject: Re: [dnsext] stub validation
References: <C8EA875A.83BA%roy@nominet.org.uk> <8D01F5E3-F863-4873-BB0E-654FA89983F7@virtualized.org> <88612.1287969841@nsa.vix.com> <AANLkTint8qrGfP_x2ZsCApza6YimznDHdvcJtHDP6HzZ@mail.gmail.com>
In-Reply-To: <AANLkTint8qrGfP_x2ZsCApza6YimznDHdvcJtHDP6HzZ@mail.gmail.com>
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
List-ID: <namedroppers.ops.ietf.org>
List-Unsubscribe: To unsubscribe send a message to namedroppers-request@ops.ietf.org with
List-Unsubscribe: the word 'unsubscribe' in a single line as the message text body.
List-Archive: <http://ops.ietf.org/lists/namedroppers/>

Phillip Hallam-Baker wrote:

> You probably don't want Starbucks to manage your network security.
> 
> But what about Symantec, MacAfee, Comodo, Kaspersky and the other
> companies who specialize in providing security services?

What about APNIC, ARIN, RIPE NCC and other NICs?

> The problem with making sense of DNSSEC data is that very little
> of it makes much sense on its own.

That's because DNSSEC is not secure end to end.

						Masataka Ohta

v2.23.0 | Report a Bug | By Email