nanog mailing list archives
Re: New addresses for b.root-servers.net
From: Masataka Ohta <mohta () necom830 hpcl titech ac jp>
Date: Wed, 21 Jun 2023 14:39:31 +0900
Matt Corallo wrote:
As PKI, including DNSSEC, is subject to MitM attacks, is not cryptographically secure, does not provide end to end security and is not actually workable, why do you bother?It sounds like you think nothing is workable, we simply cannot make anything secure
If an end and another end directly share a secret key without involving untrustworthy trusted third parties, the ends are secure end to end.
- if we should give up on WebPKI (and all its faults) and DNSSEC (and all its faults) and RPKI (and all its faults), what do we have left?
An untrustworthy but light weight and inexpensive (or free) PKI may worth its price and may be useful to make IP address based security a little better. Masataka Ohta
Current thread:
- Re: New addresses for b.root-servers.net, (continued)
- Re: New addresses for b.root-servers.net Matt Corallo (Jun 18)
- Re: New addresses for b.root-servers.net niels=nanog (Jun 18)
- Re: New addresses for b.root-servers.net Cynthia Revström via NANOG (Jun 18)
- Re: New addresses for b.root-servers.net niels=nanog (Jun 18)
- Re: New addresses for b.root-servers.net Masataka Ohta (Jun 19)
- Re: New addresses for b.root-servers.net Matt Corallo (Jun 19)
- Re: New addresses for b.root-servers.net Masataka Ohta (Jun 19)
- Re: New addresses for b.root-servers.net Matt Corallo (Jun 20)
- Re: New addresses for b.root-servers.net Masataka Ohta (Jun 20)
- Re: New addresses for b.root-servers.net Matt Corallo (Jun 20)
- Re: New addresses for b.root-servers.net Masataka Ohta (Jun 20)
- Re: New addresses for b.root-servers.net Mark Andrews (Jun 20)
- Re: New addresses for b.root-servers.net Masataka Ohta (Jun 21)
- Re: New addresses for b.root-servers.net David Conrad (Jun 16)
- Re: New addresses for b.root-servers.net Jared Mauch (Jun 02)
- Re: New addresses for b.root-servers.net Wes Hardaker (Jun 15)
- Re: New addresses for b.root-servers.net Robert Story (Jun 04)
- Re: New addresses for b.root-servers.net Matthew Petach (Jun 07)
- Re: New addresses for b.root-servers.net Robert Story (Jun 08)