On 17 November 2011 19:13, McTim <[email protected]> wrote: > On 11/17/11, Reinier Battenberg <[email protected]> wrote: >> >> from a domain owner perspective, do we need to do anything to (for example) >> sign mountbatten.ug ? > > if you want to secure the zone, yes, and then pass the DS record to the > parent. > > If you are suffering from MitM attacks, then its useful, if not, > debatable in terms of cost vs benefit.
I'd say it is useful if you want to *protect* yourself from man-in-the-middle attacks, cache poisoning and other malicious activity. I don't think the cost of deployment for a registrant/domain owner is that significant. Otherwise Reinier, you do not *have* to do anything - dnssec is optional and backward compatible. I am guessing CFI will set up a test bed for people to play around with first. -- Hari _______________________________________________ The Uganda Linux User Group: http://linux.or.ug Send messages to this mailing list by addressing e-mails to: [email protected] Mailing list archives: http://www.mail-archive.com/[email protected]/ Mailing list settings: http://kym.net/mailman/listinfo/lug To unsubscribe: http://kym.net/mailman/options/lug The Uganda LUG mailing list is generously hosted by INFOCOM: http://www.infocom.co.ug/ The above comments and data are owned by whoever posted them (including attachments if any). The mailing list host is not responsible for them in any way.
