data request on Sitefinder

Mon Oct 20 21:04:43 UTC 2003

On Mon, 20 Oct 2003 16:31:45 -0400 "Steven M. Bellovin" <smb at research.att.com> wrote:

> A number of people havce responded that they don't want to be forced to 
> pay for a change that will benefit Verisign.  That's a policy issue I'm 
> trying to avoid here.  I'm looking for pure technical answers -- how 
> much lead time do you need to make such changes safely?

may i suggest another operational issue then?

how does verisign plan to identify and notify all affected parties when changes
are proposed?

for example, in the current case, how do they plan to identify every party running
postfix and inform them that they need to upgrade their MTA?

this seems non-trivial to me.

richard
-- 
Richard Welty                                         rwelty at averillpark.net
Averill Park Networking                                         518-573-7592
    Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security