[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


To: David Conrad <david.conrad@nominum.com>
CC: John Stracke <jstracke@incentivesystems.com>, ietf <ietf@ietf.org>, isdf@isoc.org, Key Distribution <keydist@cafax.se>, openssl-users@openssl.org
From: "Eric A. Hall" <ehall@ehsco.com>
Date: Tue, 11 Jun 2002 20:15:19 -0500
Sender: owner-keydist@cafax.se
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.0) Gecko/20020530
Subject: Re: Global PKI on DNS?


on 6/11/2002 8:00 PM David Conrad said the following:

> Why do you think the roots and TLDs would get millions of TCP queries for
> their certs?  Why would anyone want to get the certs of the roots or tlds?

Why do you think anybody would cache them long-term if they were right
there handy in the DNS database?

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/



Home | Date list | Subject list