[83703] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: DNSSEC to be strangled at birth.

daemon@ATHENA.MIT.EDU (Jack Lloyd)
Thu Apr 5 15:49:14 2007

Date: Thu, 5 Apr 2007 10:05:02 -0400
From: Jack Lloyd <lloyd@randombit.net>
To: cryptography@metzdowd.com
Mail-Followup-To: cryptography@metzdowd.com
In-Reply-To: <024e01c776d9$7dc1eb70$2e08a8c0@CAM.ARTIMI.COM>

On Wed, Apr 04, 2007 at 05:51:27PM +0100, Dave Korn wrote:

>   Can anyone seriously imagine countries like Iran or China signing up to a
> system that places complete control, surveillance and falsification
> capabilities in the hands of the US' military intelligence?

How is this any different from plain-old-DNS? Except that now the
number of attackers is limited to one - instead of worrying about the
US or China or UK or India or Russia or whoever falsifying DNS
records, you just have to worry about the US. And if/when you catch
them at it, you know exactly who did it.

-Jack

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post