On Wed, 12 May 2004, Dave Crocker wrote:
Anyone with administrative control of a domain name can assert that it
maps to any IP Address they choose.
Anyone with administrative control of an in-addr.arpa IP Address entry
can assert that it maps to any domain name they choose.
A goal of ensuring that such assertions are "authorized" must,
therefore, come from some additional mechanism(s).
You make it sound as if checking the consistency of forward and reverse
DNS is something new or mysterious.
--
Tony Finch <dot(_at_)dotat(_dot_)at> http://dotat.at/