RE: Why not just use S/MIME or GPG signatures?

But what if the URL referenced in the TXT record is currently
unavailable?  A better solution might be to use the DNS security
extensions, which provide a mechanism for key distribution, or put the
key IN the TXT record, rather than a URL.

Ref: http://www.faqs.org/rfcs/rfc2535.html

---
Dustin D. Trammell
Vulnerability Remediation Alchemist
Citadel Security Software, Inc.


-----Original Message-----
From: Matthew [mailto:matthew(_at_)syrah(_dot_)us] 
Sent: Tuesday, October 07, 2003 3:15 PM
To: spf-discuss(_at_)v2(_dot_)listbox(_dot_)com
Subject: Re: [spf-discuss] Why not just use S/MIME or GPG signatures?


On Tue, Oct 07, 2003 at 12:10:30AM -0700, Phil Karn wrote:

        2) domain.com uses DNS TXT records to publish the URL from
which its public key(s) can be downloaded.

-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your 
subscription, 
please go to 
http://v2.listbox.com/member/?listname(_at_)½§Åv¼ð¦¾Øß´ëù1Ií-»Fqx(_dot_)com