[114578] in North American Network Operators' Group
Re: another brick in the wall[ed garden]
daemon@ATHENA.MIT.EDU (Robert E. Seastrom)
Fri May 15 08:33:27 2009
To: Skywing <Skywing@valhallalegends.com>
From: "Robert E. Seastrom" <rs@seastrom.com>
Date: Fri, 15 May 2009 08:33:16 -0400
In-Reply-To: <982D8D05B6407A49AD506E6C3AC8E7D601303C4C7783@caralain.haven.nynaeve.net>
(Skywing@valhallalegends.com's message of "Thu,
14 May 2009 21:06:59 -0500")
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Skywing <Skywing@valhallalegends.com> writes:
> You are brave indeed to trust your packets over the air without a VPN or tunnel of some sort.
TSIG is like IPSEC's AH but for DNS. Being untrusting is how I
managed to find out about these shenanigans in the first place. I
don't care particularly about hiding the payload on a DNS query.
-r
