Return-Path: X-Original-To: ietfarch-namedroppers-archive-gleetwall6@core3.amsl.com Delivered-To: ietfarch-namedroppers-archive-gleetwall6@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A214528C10C; Mon, 28 Jul 2008 10:05:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.195 X-Spam-Level: X-Spam-Status: No, score=-0.195 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MIME_8BIT_HEADER=0.3, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PdZUa+5-Ova7; Mon, 28 Jul 2008 10:05:53 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id A18393A6A91; Mon, 28 Jul 2008 10:05:53 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1KNW4Q-0003yr-JS for namedroppers-data@psg.com; Mon, 28 Jul 2008 16:59:38 +0000 Received: from [217.147.82.63] (helo=mail.avalus.com) by psg.com with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1KNW4L-0003yJ-RI for namedroppers@ops.ietf.org; Mon, 28 Jul 2008 16:59:36 +0000 Received: from [192.168.100.3] (localhost [127.0.0.1]) by mail.avalus.com (Postfix) with ESMTP id 865ABC2DB2; Mon, 28 Jul 2008 17:59:30 +0100 (BST) Date: Mon, 28 Jul 2008 17:59:27 +0100 From: Alex Bligh Reply-To: Alex Bligh To: =?UTF-8?Q?=C3=93lafur_Gu=C3=B0mundsson_=2FDNSEXT_chair?= , namedroppers@ops.ietf.org cc: Alex Bligh Subject: Re: Forgery Resistance phase #2 Message-ID: In-Reply-To: <200807281555.m6SFsxAO021711@stora.ogud.com> References: <200807281555.m6SFsxAO021711@stora.ogud.com> X-Mailer: Mulberry/4.0.8 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Sender: owner-namedroppers@ops.ietf.org Precedence: bulk List-ID: --On 28 July 2008 11:53:32 -0400 "=C3=93lafur Gu=C3=B0mundsson /DNSEXT = chair"=20 wrote: > The list is supposed to be as complete as possible, if there is anything > missing feel free to bring it up. I contribute these for completeness without expressing an opinion as to their validity or otherwise: 1. There seems a body of opinion on namedroppers that replacing stub resolvers by full recursive caching resolvers improves forgery resistance. 2. Under "Deploy DNSSEC" some commentators have said a long pole in the tent of deployability is signing the root, hence DLV and DLVPTR are relevant to the topic in that they could speed deployment of DNSSEC. I think it's a useful list BTW. Another useful list would be to define the problem space(s) being addressed as there was some debate about that too. Alex -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: