Phillip Hallam-Baker wrote:
End to end ceases to have any value whatsoever once people attempt to
codify it into a rigid ideology.
Exactly.
That was what happening by those people with false claims that
DNSSEC were secure end to end.
The reality, however, is that attacking DNSSEC is as easy as
plain old DNS by poisoning cache with forged certificate
through glue (e.g. Kaminsky's attack).
Masataka Ohta
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf