[dns-operations] OpenDNS adopts DNSCurve

Paul Vixie vixie at isc.org
Fri Feb 26 03:14:01 UTC 2010


> Date: Thu, 25 Feb 2010 18:06:39 -0800
> From: Randy Bush <randy at psg.com>
> 
> imiho, this issue has made tsig of extremely limited use, e.g. axfr
> protection.

agreed.  however, tsig was actually meant to support UPDATE, which it has.
using it for AXFR is a bonus.  the fact that it doesn't scale to QUERY does
not bother me at all -- that's what SIG(0) is for after all.



More information about the dns-operations mailing list