Re: Mockapetris on DNSsec

["Steven M. Bellovin" <smb@research.att.com>]

In message <20030412012455.EA09618E1@thrintun.hactrn.net>, Rob Austein writes:
>At Fri, 11 Apr 2003 21:11:52 -0400, Steven M. Bellovin wrote:
>> 
>> http://www.theregister.co.uk/content/7/30224.html
>> 
>> Someone should respond...
>
>Er, what's to respond to?  IETF doesn't get to decide who signs the
>root, and attempting to summarize the opt-sideways debate in a form
>suitable for The Register seems pretty hopeless.
>
>Am I missing something?
>
Yah -- I don't think that that's even close to the dnssec problem.  
It's also not related to DOS attacks, and it's the wrong place to put a 
PKI.

		--Steve Bellovin, http://www.research.att.com/~smb (me)
		http://www.wilyhacker.com (2nd edition of "Firewalls" book)