Re: In-Band Rollover and Out-Of-Band Priming

Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp> Tue, 13 July 2004 13:49 UTC

From: Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>
Subject: Re: In-Band Rollover and Out-Of-Band Priming
Date: Tue, 13 Jul 2004 22:49:44 +0900
Lines: 19
Sender: owner-namedroppers@ops.ietf.org
References: <20040713141639.0e844225.olaf@ripe.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Cc: namedroppers@ops.ietf.org
X-From: owner-namedroppers@ops.ietf.org Tue Jul 13 15:57:36 2004
Return-path: <owner-namedroppers@ops.ietf.org>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: ja, en-us, en
To: "Olaf M. Kolkman" <olaf@ripe.net>
In-Reply-To: <20040713141639.0e844225.olaf@ripe.net>
Precedence: bulk
X-Message-ID:
Message-ID: <20140418071902.2560.54651.ARCHIVE@ietfa.amsl.com>

Olaf;

> This is a heads up for: draft-kolkman-dnsext-dnssec-in-band-rollover-00:

Why do we need rollover?

What kind of attack is assumed to be protected against?

Depending on the assumed attack, it may be better just to have
a single long key forever than having multiple short ones.

							Masataka Ohta


--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>