You are in error in your reasoning.
Regarding Windows: W2k has no DNSSEC support, period; you can't (and
won't) be able to use those RR types on W2k. W2k3 has some limited
support. Providing full support will await a future OS release, as I
have been saying.
Regarding the compelling need: methinks you place far too much import on
this unfinished technology.
Bob
-----Original Message-----
From: Arnt Gulbrandsen [mailto:arnt(_at_)gulbrandsen(_dot_)priv(_dot_)no]
Sent: Friday, May 21, 2004 12:12 AM
To: Bob Atkinson
Cc: Michael Richardson; ietf-mxcomp(_at_)imc(_dot_)org; Alan T. DeKok
Subject: Re: "Bob Atkinson": RE: suggested new RRtype experiment
Bob Atkinson writes:
Yes, correct.
I suggest that this isn't a big problem. Once other OSes support
DNSSEC
Windows must too, or the blackhats will start looking at attacks.
DNSSEC support requires lots of new RR types, one more for MARID won't
make a difference.
Arnt