On Sun, 27 Jul 2008 14:07:03 EDT, Glenn.Everhart@xxxxxxxxx said: > The need for something more like ssl certs in there remains It's called DNSSEC, which has been out for a decade and more. > (Also needed for bgp I suspect). RFC2385 (TCP MD5 protection for BGP) addresses most of the issues, at least on a peer-to-peer basis, and has been out for a decade. There's a discussion of the issues in RFC5123.
Attachment:
pgpqvNWf6w8_Y.pgp
Description: PGP signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/