From: Bastian Blank (bastian+postfix-users=postfix.orgwaldi.eu.org)
Date: Thu Dec 18 2008 - 08:00:40 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, Dec 17, 2008 at 02:59:27PM -0500, Victor Duchovni wrote:
> Postfix uses res_search(3). DNSSEC would have to be supported by the
> C-library stub resolver code, not Postfix.

DNSSEC can be checked by the recursive resolver, which is sufficient in
most setups.

> DNSSEC is very complex. I rather like DJB's DNSCurve, but it seems the
> the political climate may be against this IMHO very sound proposal.

Well, DNSCurve solves a completely different problem, transport vs
end-to-end security.

Bastian

--
It would be illogical to assume that all conditions remain stable.
                -- Spock, "The Enterprise Incident", stardate 5027.3

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]