nanog mailing list archives

Re: dnscurve and DNS hardening, was Re: Dan Kaminsky


From: Florian Weimer <fweimer () bfk de>
Date: Thu, 06 Aug 2009 07:37:01 +0000

* Naveen Nathan:

I'll assume the cipher used for the lasting secret keys is interchangeable.

Last time I checked, even the current cryptographic algorithms weren't
specified.  It's unlikely that there is an upgrade path (other than
stuffing yet another magic label into your name server names).

-- 
Florian Weimer                <fweimer () bfk de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99


Current thread: