Verisign brain damage and DNSSec.....Was:Re: What *are* they smoking?

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Tue Sep 16 18:17:45 UTC 2003


On Tue, 16 Sep 2003 11:08:11 PDT, bmanning at karoshi.com said:
> > On Tue, 16 Sep 2003 09:59:40 PDT, bmanning at karoshi.com said:

> 	thats one aspect yes.  the valdiation chain should tell
> 	you who signed the delegations.  It won't lie.
> 	you will know that V'sign put that data there.

How frikking many hacks will we need to BIND9 to work around this braindamage?
One to stuff back in the NXDomain if the A record points there, another to
do something with make-believe DNSsec from them..... What's next?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20030916/62963e0f/attachment.sig>


More information about the NANOG mailing list