<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Re: Verisign brain damage and DNSSec.....Was:Re: What *are* they smoking?</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1226" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=510150922-16092003><FONT face=Arial color=#0000ff size=2>And
whats to say they don't get around our methods of blacklisting it by changing
the IP around every zone update?</FONT></SPAN></DIV>
<DIV><SPAN class=510150922-16092003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> owner-nanog@merit.edu
[mailto:owner-nanog@merit.edu]<B>On Behalf Of
</B>Valdis.Kletnieks@vt.edu<BR><B>Sent:</B> Tuesday, September 16, 2003 2:18
PM<BR><B>To:</B> bmanning@karoshi.com<BR><B>Cc:</B> bownes@web9.com;
gmaxwell@martin.fl.us; haesu@towardex.com; marius@marius.org;
nanog@merit.edu<BR><B>Subject:</B> Re: Verisign brain damage and
DNSSec.....Was:Re: What *are* they smoking?<BR><BR></FONT></DIV><!-- Converted from text/plain format -->
<P><FONT size=2>On Tue, 16 Sep 2003 11:08:11 PDT, bmanning@karoshi.com
said:</FONT> <BR><FONT size=2>> > On Tue, 16 Sep 2003 09:59:40 PDT,
bmanning@karoshi.com said:</FONT> </P>
<P><FONT size=2>> thats one aspect
yes. the valdiation chain should tell</FONT> <BR><FONT size=2>>
you who signed the delegations. It won't
lie.</FONT> <BR><FONT size=2>> you will know
that V'sign put that data there.</FONT> </P>
<P><FONT size=2>How frikking many hacks will we need to BIND9 to work around
this braindamage?</FONT> <BR><FONT size=2>One to stuff back in the NXDomain if
the A record points there, another to</FONT> <BR><FONT size=2>do something
with make-believe DNSsec from them..... What's next?</FONT>
</P></BLOCKQUOTE></BODY></HTML>