[Hipsec-rg] Key Revocation Issue

oleg.ponomarev at hiit.fi (Oleg Ponomarev) Wed, 21 January 2009 15:30 UTC

From: "oleg.ponomarev at hiit.fi"
Date: Wed, 21 Jan 2009 17:30:45 +0200
Subject: [Hipsec-rg] Key Revocation Issue
In-Reply-To: <001b01c97bcf$a0680c70$480c6f0a@china.huawei.com>
References: <001b01c97bcf$a0680c70$480c6f0a@china.huawei.com>
Message-ID: <alpine.LFD.2.00.0901211720370.17180@stargazer.pc.infrahip.net>

Hello! On Wed, 21 Jan 2009, Zhang Dacheng wrote:

> DNS server cannot directly be used to help a user holding a antique HIT 
> access the host whose HIT has been changed, unless the user has got the 
> FQDN (by reverse DNS lookup of HITs maybe) in advance.

Why _user_ would need to access the host by its HIT? This is required for 
legacy applications, but people should operate with domain names, IMHO.

-- 
Regards, Oleg.