3 ms·
This proposes to encode an encryption key into the NS delegation for a zone, and backing it up with an encryption scheme touted to be fast enough to handle high
by eggnet 18y ago
This proposes to encode an encryption key into the NS delegation for a zone, and backing it up with an encryption scheme touted to be fast enough to handle high loads.
The idea of encoding a key into the NS name sounds like something djb would dream up, seeing the names as useless anyway (you'd get that impression after using his software and reading his notes on dns). The part that pushes the solution over the top is providing a fast enough encryption algorithm to work for dns servers.
What can I say, I'm impressed.