nanog mailing list archives

Re: another brick in the wall[ed garden]


From: "Robert E. Seastrom" <rs () seastrom com>
Date: Fri, 15 May 2009 08:33:16 -0400


Skywing <Skywing () valhallalegends com> writes:

You are brave indeed to trust your packets over the air without a VPN or tunnel of some sort.

TSIG is like IPSEC's AH but for DNS.  Being untrusting is how I
managed to find out about these shenanigans in the first place.  I
don't care particularly about hiding the payload on a DNS query.

-r



Current thread: