Re: linux-ipsec: Re: your mail

(continued from last night)

On Tue, 1 Dec 1998, John Gilmore wrote:
> Since the DNS maintainers will fix this within the next year or two,

It may, in any case, be more elaborate than we need. Particularly for an interim solution, simply forking on request may be all that's required.

> Once it can do that, we'll need a few utilities for easily generating

Surely this would come under DNSSEC, not IPSEC? Not that we shouldn't do it, but I'm slightly puzzled at why this is reasonable for us to do and a tree-walk DNS-data signature verifier isn't.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)