Re: Global PKI on DNS?

[Vernon Schryver <vjs at calcite.rhyolite.com>]

> To: ietf at ietf.org
> Cc: isdf at isoc.org, keydist at cafax.se, openssl-users at openssl.org
> From: "John Stracke" <jstracke at incentivesystems.com>


> >So users wanting this new service will be pretty motivated to switch DNS
> >servers when the time comes, what's the big deal in that? 
>
> The big deal is that some of the more restrictive ISPs may not permit 
> customers to bypass their DNS servers.  Same as with HTTP interception 
> proxies.

That's as irrelevant as whether customers of some cable TV system
might not be able to get some new TV network, because they are not
getting Internet service.  No matter what your bill might say, you
are not getting Internet service if you also get interception proxies
or even just port 25 blocking.


Noticing openssl-users at openssl.org in the CC list of this thread makes me
ponder the compatibility of TLS with SMTP and HTTP interception proxies.


Vernon Schryver    vjs at rhyolite.com