dnsext-3----Page:11
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21 

Missing parts in the draft
The draft has not considered a class of replay attacks
this can be fixed by maintaining state i.e. maintaining a log of previously used trust anchors
Thorough analysis of the “client states”
what happens if the zone owner does not do what it MUST do, etc
PPT Version