[dns-operations] OpenDNS adopts DNSCurve

Tony Finch dot at dotat.at
Thu Feb 25 12:43:50 UTC 2010


On Thu, 25 Feb 2010, Stephane Bortzmeyer wrote:
>
> http://blog.opendns.com/2010/02/23/opendns-dnscurve/
>
> > High traffic DNS servers can't handle signing every response packet,
> > so they need to pre-compute signatures. This limits how companies like
> > Akamai and Google or projects like the NTP Pool can use DNS for global
> > load balancing and routing users to their nearest servers.

I don't see why these kinds of special DNS servers can't sign all the
possible RRsets they might return offline.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.



More information about the dns-operations mailing list