[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


To: dnsop@cafax.se
From: Kevin Darcy <kcd@daimlerchrysler.com>
Date: Wed, 19 Mar 2003 12:53:05 -0500
In-Reply-To: <20030319090724.0088218a.ggm@apnic.net>
Sender: owner-dnsop@cafax.se
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.3) Gecko/20030312
Subject: Re: Radical Surgery proposal: stop doing reverse for IPv6.

George Michaelson wrote:

>Radical Surgery proposal: stop doing reverse for IPv6.
>
>straw poll of ADs and WG chairs are mutedly neutral. 
>
>nobody is strongly in favour of continuing.
>
>of course RIR will continue to fulfil reverse delegation role as long as the
>community requires it. 
>
>but, maybe its time to stop wanting it.
>
Reverse DNS for telecom gear (routers, switches, etc.) still makes sense 
IMO, because it demonstrably aids network troubleshooting. But I think 
we should stop recommending it for end nodes. End-node reverse DNS just 
nourishes the myth that you can reliably tell who/where/what 
something/someone is just by doing a reverse lookup on their source 
address, a myth from whence springs wrongheaded security methodologies, 
bogus "traffic-shaping" schemes and similar balderdash. More concisely, 
I think end-node reverse DNS fails cost/benefit analysis.

                                                                         
                                          - Kevin



#----------------------------------------------------------------------
# To unsubscribe, send a message to <dnsop-request@cafax.se>.

Home | Date list | Subject list