Re: [DNSOP] I think we may have a solution - DNSCurve

[Mark Andrews <Mark_Andrews at isc.org>]

> On Mon, Sep 01, 2008 at 04:49:12PM -0400,
>  Paul Wouters <paul at xelerance.com> wrote 
>  a message of 18 lines which said:
> 
> > many issues there which are not addressed [...] authenticated denial
> > of existence,
> 
> Although I agree with your criticism that there is no published
> *specification* of DNScurve (wether in Internet-Draft form or else),
> this specific issue seems addressed today: DNScurve signs the packet,
> not the resource records, and therefore a NXDOMAIN response can be
> signed (unlike what happens with DNSSEC).

	A NXDOMAIN response if cyptographically proved with DNSSEC.

	There are other rcodes that DNSSEC does not cover but NXDOMAIN
	is not one of them.

	Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org
_______________________________________________
DNSOP mailing list
DNSOP at ietf.org
https://www.ietf.org/mailman/listinfo/dnsop