<html><head>
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
</head><body bgcolor="#FFFFFF" text="#000000"><br>
<br>
Florian Weimer wrote:
<blockquote cite="mid:87a9jrdpzq.fsf@mid.deneb.enyo.de" type="cite"><span
style="font-family: monospace;">...</span>
<pre wrap=""><!---->
Because DNSSEC does not prevent cache poisoning, it only detects it.</pre>
</blockquote>
<br>
i do not understand this statement.<br>
<br>
<blockquote cite="mid:87a9jrdpzq.fsf@mid.deneb.enyo.de" type="cite">
<pre wrap="">
... In retrospect, not signing delegations and glue was a huge mistake.</pre>
</blockquote>
<pre wrap="">
</pre>
one of many. but we're 17 years into the dnssec experience, so starting
over is either contraindicated or our only salvation, depending.<br>
<br>
</body></html>