imarid-2----Page:8
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18  19  20  21  22  23  24  25  26  27  28  29  30  31 

Examples of how this fails
DNSSEC, the KEY Resource Record (RR)
Supposed to hold keys for all purposes
Trust model unworkable, performance hit
SIKED BoF
DNSSEC signatures
Has caused tremendous problems in code
"Corner cases" repeatedly found, some unsolvable, simply ignoring them
PPT Version