[RAM] DNS usage in NERD

[RJ Atkinson <rja at extremenetworks.com>]

Earlier, Brian Carpenter wrote:
% Also, this way you remove any security issues associated with DNS,
% and any confusion about IPv4 vs IPv6 connectivity to the servers.

The *only* way to remove potential security issues associated
with DNS is to deploy DNS Security.  Period.  We have huge
existing risks with respect to widespread non-authentication
of DNS data.  NERD doesn't appear to change those existing
risks.

The known solution for those risks is to deploy DNS Security,
which deployment apparently requires non-trivial effort
but does appear to be possible.

Yours,

Ran


_______________________________________________
RAM mailing list
RAM at iab.org
https://www1.ietf.org/mailman/listinfo/ram