dnscurve and DNS hardening, was Re: Dan Kaminsky

Florian Weimer fweimer at bfk.de
Thu Aug 6 07:37:01 UTC 2009


* Naveen Nathan:

> I'll assume the cipher used for the lasting secret keys is interchangeable.

Last time I checked, even the current cryptographic algorithms weren't
specified.  It's unlikely that there is an upgrade path (other than
stuffing yet another magic label into your name server names).

-- 
Florian Weimer                <fweimer at bfk.de>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99




More information about the NANOG mailing list