On Tue, Jun 19, 2018 at 04:31:55PM +0200, Petr Špaček wrote: > I wonder if this proposal is worth the complexity ... If we wanted plain > checksum we could use TSIG with built-in key (all zeroes or so) and to get > checksum for the network part with negligible implementation complexity. > (TSIG trick is Mukund's idea, not mine.)
Well-known TSIG key trick is a Mark Andrews idea from the time when this was discussed during the CHECKSUM draft. Mukund _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop