Re: [mif] some questions about dns-server-selection

[Michael Richardson <[e-mail]>]

>>>>> "teemu" == teemu savolainen <[e-mail]> writes:
    teemu> On this I have to confess I don't recall a particular reason
    teemu> (this draft has been in works for four years, and the early
    teemu> days are getting blurry in my memory). Do you see this as a
    teemu> serious issue that REALLY should be addressed before
    teemu> publication?

No.

    >> so, basically, please never use this protocol unless you know
    >> what you are doing, in which case, you should just vi
    >> /etc/resolv.conf instead?  That DNSSEC is required to even think
    >> about using this is instructive, because it means that actually,
    >> recursive DNS lookups are local already.

    teemu> You should check the zillion emails about security
    teemu> discussions related to this draft.

I figured as much.

    teemu> But please read carefully the text you quoted:" using secure,
    teemu> trusted channel, ". This means that if a channel from a host
    teemu> to the DHCP server is trusted, DNSSEC is not needed. These
    teemu> kinds of environments exist e.g. in 3GPP domain, where the
    teemu> cellular connection is considered trusted enough for this
    teemu> purpose.

okay, an existence proof of this kind of enough for me.

-- 
Michael Richardson
-on the road-