Reverse DNS RFCs and Recommendations

Masataka Ohta mohta at
Fri Nov 1 22:12:20 UTC 2013

 Valdis.Kletnieks at wrote:

>> It is a lot simpler and a lot more practical just to
>> use shared secret between a CPE and a ISP's name server
>> for TSIG generation.
> Hmm.. Shared secret between a CPE you don't necessarily control
> and your own DNS server?

Of course. That is the very basic requirement for any security
between two parties.

						Masataka Ohta

More information about the NANOG mailing list