data request on Sitefinder

Mon Oct 20 23:55:32 UTC 2003

Richard -
Do they (Verisign)  have any legal reason to??? - is there anything between
them and ANY of their clients that requires them to inform them before any
changes to protocol facilities are made - I think not.

Todd

----- Original Message ----- 
From: "Richard Welty" <rwelty at averillpark.net>
To: <nanog at nanog.org>
Sent: Monday, October 20, 2003 2:04 PM
Subject: Re[2]: data request on Sitefinder

>
> On Mon, 20 Oct 2003 16:31:45 -0400 "Steven M. Bellovin"
<smb at research.att.com> wrote:
>
> > A number of people havce responded that they don't want to be forced to
> > pay for a change that will benefit Verisign.  That's a policy issue I'm
> > trying to avoid here.  I'm looking for pure technical answers -- how
> > much lead time do you need to make such changes safely?
>
> may i suggest another operational issue then?
>
> how does verisign plan to identify and notify all affected parties when
changes
> are proposed?
>
> for example, in the current case, how do they plan to identify every party
running
> postfix and inform them that they need to upgrade their MTA?
>
> this seems non-trivial to me.
>
> richard
> -- 
> Richard Welty
rwelty at averillpark.net
> Averill Park Networking
518-573-7592
>     Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security
>