[170885] in North American Network Operators' Group
Re: DNSSEC?
daemon@ATHENA.MIT.EDU (Matt Palmer)
Fri Apr 11 17:47:37 2014
Date: Sat, 12 Apr 2014 07:47:15 +1000
From: Matt Palmer <mpalmer@hezmatt.org>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <7E7AB3CC-F434-494A-AB99-5A745654F872@tzi.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Fri, Apr 11, 2014 at 09:37:38PM +0200, Carsten Bormann wrote:
> On 11 Apr 2014, at 21:25, Chris Adams <cma@cmadams.net> wrote:
>
> > DNSSEC does not use TLS (or any other kind of transport encryption).
>
> The administrative interfaces controlling the implementation might still do.
That's not DNSSEC that's broken, then.
- Matt
--
"Mr... Baggins. It seems you have been leading... two lives. In one... you are
an ordinary hobbit... you organize your uncle's diary... give generous gifts to
children. In the other... you are the Ring Bearer... charged to carry the One
Ring to Mount Doom. One life has... a future, Mr... Baggins, and the other..."