Re: Global PKI on DNS?

To: "Eric A. Hall" <ehall at ehsco.com>
Subject: Re: Global PKI on DNS?
From: David Conrad <david.conrad at nominum.com>
Date: Tue, 11 Jun 2002 21:01:07 -0700
Cc: John Stracke <jstracke at incentivesystems.com>, ietf <ietf at ietf.org>, <isdf at isoc.org>, Key Distribution <keydist at CAFAX.SE>, <openssl-users at openssl.org>
In-reply-to: <3D06A0A7.9040109@ehsco.com>
Sender: owner-ietf at ietf.org
User-agent: Microsoft-Entourage/10.1.0.2006

On 6/11/02 6:15 PM, "Eric A. Hall" <ehall at ehsco.com> wrote:
>> Why do you think the roots and TLDs would get millions of TCP queries for
>> their certs?  Why would anyone want to get the certs of the roots or tlds?
> Why do you think anybody would cache them long-term if they were right
> there handy in the DNS database?

Let me try again.

Why would anyone care about root or TLD _certificates_?  They might be
interested in the root or TLD sig/key records but that is a completely
different thing and unrelated to cert records.

Rgds,
-drc

Follow-Ups:
- Re: Global PKI on DNS?
  - From: Eric A. Hall

References:
- Re: Global PKI on DNS?
  - From: Eric A. Hall

Prev by Date: Re: Global PKI on DNS?
Next by Date: Re: Global PKI on DNS?
Previous by thread: Re: Global PKI on DNS?
Next by thread: Re: Global PKI on DNS?
Index(es):
- Date
- Thread

Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.

Re: Global PKI on DNS?

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.