[170885] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: DNSSEC?

daemon@ATHENA.MIT.EDU (Matt Palmer)
Fri Apr 11 17:47:37 2014

Date: Sat, 12 Apr 2014 07:47:15 +1000
From: Matt Palmer <mpalmer@hezmatt.org>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <7E7AB3CC-F434-494A-AB99-5A745654F872@tzi.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On Fri, Apr 11, 2014 at 09:37:38PM +0200, Carsten Bormann wrote:
> On 11 Apr 2014, at 21:25, Chris Adams <cma@cmadams.net> wrote:
> 
> > DNSSEC does not use TLS (or any other kind of transport encryption).
> 
> The administrative interfaces controlling the implementation might still do.

That's not DNSSEC that's broken, then.

- Matt

-- 
"Mr... Baggins. It seems you have been leading... two lives.  In one... you are 
an ordinary hobbit... you organize your uncle's diary... give generous gifts to 
children.  In the other...  you are the Ring Bearer... charged to carry the One 
Ring to Mount Doom.  One life has... a future, Mr... Baggins, and the other..."



home help back first fref pref prev next nref lref last post