Re: issues with draft-ietf-dnsext-dnssec-trans-00.txt

[Alex Bligh <alex@alex.org.uk>]

--On 10 June 2004 17:18 +0100 Ben Laurie <ben@algroup.co.uk> wrote:

> "2.1.1.4 Cons
>
>     Unbalanced cost is a ground for DDoS. Though this protects against
>     enumeration, it is not really a path for versioning."
>
> This should also mention the security risk of the requirement for an
> online key.

Which you could add are of particular concern where not all secondaries
are under the same administrative control as the primary (whereas
with DNSSEC-bis this is irrelevant)

Alex

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>