On Jul 27, 2005, at 8:14 PM, Douglas Otis wrote:
Due to the above average resources consumed by public keys, the
number of separate keys should be kept proportional to what is
required to authenticate physical sources within the domain.
Excessive quantities of these public keys in DNS, when employed by
an application as ubiquitous as email, may negatively impact DNS
performance and stability.
This is good, except "resources" may be too generic. I was
specifically noting the memory footprint. I don't believe CPU
overhead or bandwidth utilization directly impacts the cache, though
these may impact the system. I would recommend swapping out
"resources" for "memory".
-andy