Re: proposal for a compromise on DNS discovery

[Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>]

Francis.Dupont@enst-bretagne.fr;

>    > => all the crypto things I know are valid only at limited amount
>    > of time.
>    
>    How many of the crypto things you know can be autoconfigured?
>    
> => my answer to the proper question "how many of devices which
> can be autoconfigured and don't use any crypto thing I know?"
> is none for recent (i.e., in this century) devices.

Yours is an improper question.

Using autoconfiguration on non crypt things is fine.

However, devices using crypto thing is secure only if they do not use
autoconfiguration of the crypto thing.

Answer the question.

>    > In fact the military measure of a secret is the duration
>    > one can expect it will remain secret. So as soon as there is
>    > some kind of security involved in the network (and it should be :-),
>    
>    So, it should be noted that root keys must also be periodically
>    configured.
>    
> => do it should be noted than nothing may stay valid forever, even
> root keys.
> 

That's how security needs manual configuration.

							Masataka Ohta
#----------------------------------------------------------------------
# To unsubscribe, send a message to <dnsop-request@cafax.se>.