Re: [DNSOP] Practical issues deploying DNSSEC into the home.

2013-09-13 Thread Dickson, Brian
On 9/12/13 2:07 PM, Ted Lemon ted.le...@nominum.com wrote: On Sep 12, 2013, at 1:49 PM, Dickson, Brian bdick...@verisign.com wrote: In order to subvert or redirect a delegation, the TLD operator (or registrar) would need to change the DNS server name/IP, and replace the DS record(s). Someone

Re: [DNSOP] Practical issues deploying DNSSEC into the home.

2013-09-13 Thread Dickson, Brian
On 9/12/13 7:24 AM, Theodore Ts'o ty...@mit.edu wrote: On Wed, Sep 11, 2013 at 03:38:21PM -0400, Phillip Hallam-Baker wrote: I disagree. DNSSEC is not just DNS: its the only available, deployed, and (mostly) accessible global PKI currently in existence which also includes a constrained

Last Call: draft-ietf-geopriv-res-gw-lis-discovery-05.txt (Location Information Server (LIS) Discovery using IP address and Reverse DNS) to Informational RFC

2013-07-18 Thread Dickson, Brian
I have a question about the use of STUN, as a way of discovering IP address(es), in draft-ietf-geopriv-res-gw-lis-discovery. Section 4.1 refers to STUN by way of RFC 5389, but reading both the present draft and 5389 leaves one critical item unspecified: oWhat domain name is to be used,