To:
dnssec@cafax.se
Cc:
bmanning@isi.edu (Bill Manning)
From:
Bill Manning <bmanning@isi.edu>
Date:
Tue, 17 Sep 2002 09:42:44 -0700 (PDT)
Sender:
owner-dnssec@cafax.se
Subject:
key length & fragmentation
resend from last week. putzing about with keys of various lengths shows that when keys are over a certain size, UDP fragmentation sets in, In some cases, it is possible to actually get rollover to TCP (although this seems to be a corner case) now I've been told that UDP fragmentation can be a bad thing, leading to all sorts (well some kinds anyway) of odd operational failures that are hard to debug. UDP failure and rolling over to TCP is also considered a bad thing. so this question, "should key lengths be selected to avoid fragmentation/TCP use?" if so, why? if not, why not? -- --bill