Re: [RETRANSMIT] Re: Radical Surgery proposal: stop doing reverse for IPv6.

[Dean Anderson <dean@av8.com>]

We wouldn't be "crippling" anything.

We would be admitting that reverse is a pointless endeavor, and at best an
untrustable convenience function for finding out who is assigned an
address.

How much clue one has does not have any bearing on whether reverse is
trustable.  You appear to be holding some false assumptions, demonstrating
the harms for me.

		--Dean

On Fri, 21 Mar 2003, Brad Knowles wrote:

> At 7:44 PM -0500 2003/03/20, Dean Anderson wrote:
>
> >  It was well hashed over in namedroppers. The short answer is that admins
> >  and programmers place trust in it. This trust is misplaced, and results in
> >  a number of harms. For example, useless logfile entries (because the
> >  programmers fail to record the IP address), and it results in security
> >  compromises, of the .rhosts nature, where admins put trust in the results
> >  of a reverse query.
>
> 	So, we should cripple the entire Internet, and all those people
> who have half a clue and know what the risks are, just because some
> morons are not capable of understanding the problem?
>
> 	I'm sorry, what was your reasonable argument again?
>
> --
> Brad Knowles, <brad.knowles@skynet.be>
>
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
>      -Benjamin Franklin, Historical Review of Pennsylvania.
>
> GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--) N+
> !w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
> tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)
>

#----------------------------------------------------------------------
# To unsubscribe, send a message to <dnsop-request@cafax.se>.