ietf
[Top] [All Lists]

Re: Gen-ART and OPS-Dir review of draft-wkumari-dhc-capport-13

2015-07-13 13:38:46
On 07/13/2015 11:36 AM, Sam Hartman wrote:
I have never been convinced that DNSsec validation of A or AAAA records
has value.
I understand I am a heretic in the security community for saying that,
but there it is.
It's one more hurdle an attacker has to leap. You are right that it's not a huge win, but it seems to do more to reduce than increase the attack surface.

<Prev in Thread] Current Thread [Next in Thread>