Re: Global PKI on DNS?

[Keith Moore <moore at cs.utk.edu>]

> Unfortunately, Zymyrgy's Law of Evolving Thermodynamics applies here.
> The worms are out of the can, and I suggest anybody who wants to fight
> this battle order at least a 4-sizes-larger can....

these particular worms are still in the can, and it's probably better 
for everyone if they stay there.  

I think it's probably reasonable to use DNS as part of a way to look 
up keys and certs for DNS names, provided the keys and certs only
appear at the leaves.

Keith