ietf-asrg
[Top] [All Lists]

Re: [Asrg] porkhash: flexible anti-impersonation mail signatures

2003-04-03 11:38:01
On Thu, 3 Apr 2003 09:56:46 -0800 
Bob Atkinson <bobatk(_at_)Exchange(_dot_)Microsoft(_dot_)com> wrote:

However, one notable difference is that RMX and similar ideas make use
of the one central server (DNS) that must necessarily *already* exist
in order that one can even receive mail in the first place.

This is a qualitative difference from having to set up some additional
server, though the exact flavor and degree of that difference isn't
clear (to me at least).

First thoughts: 

  DNS is cacheable, DNS is distributed, DNS has well developed authority
  delegation structures, DNS behaviour as both a service and a control
  point is well understood and exercised, requirements and costs for
  running DNS (in whatever configuration) are well defined, and DNS
  involves no inventions of new wheels with new threat models.

-- 
J C Lawrence                
---------(*)                Satan, oscillate my metallic sonatas. 
claw(_at_)kanga(_dot_)nu               He lived as a devil, eh?           
http://www.kanga.nu/~claw/  Evil is a name of a foeman, as I live.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>