[Pdns-users] Rough internet draft

[Duane]

Ardo van Rangelrooij wrote:

> And using IPsec for those solve that issue also...
> 
> I am not saying that IPsec is the solution for all security issues but
> it has the big advantage that it is available now and works without
> requiring changes to existing software.

I understand your point of view, however it still fails in terms of
efficiency, and all name servers would receive copies of the query, this
is something that I've attempted to protect against since the
information in the query can be as important as the returned data.

-- 

Best regards,
 Duane

http://www.freeauth.org - Enterprise Two Factor Authentication
http://www.nodedb.com - Think globally, network locally
http://www.sydneywireless.com - Telecommunications Freedom
http://e164.org - Global Communication for the 21st Century

"In the long run the pessimist may be proved right,
    but the optimist has a better time on the trip."

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20080614/71106f82/attachment-0001.sig>